AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  Y ork 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Four  Premises  and  Two  Electronic  Devices,  See 
Attached  Affidavit  and  Riders 


4$  MAG  2969 


APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  pequry  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

See  Attached  Affidavit  and  Riders 


located  in  the 


-  Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized): 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 
d  evidence  of  a  crime; 

d  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
d property  designed  for  use,  intended  for  use,  or  used  in  committing  a  ciime, 

O  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  U.S.C.  s  371,  1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  USC  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

d  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: _ )  is  requested 


under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Printed  name  cird,  title 

i-M ul  .  ",■!> 


Sworn  to  before  me  and  signed  in  my  presence. 

Date:  04/08/2018 

City  and  state:  A/j&Md-  YJULJi  •  ‘‘v  yz.  y??  /T  jr 
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/  Judge ’s  signature  ■  ;  ; 

Hon.  Henry  3-  Pitman, JJ:SJ/lggistr^W Judge 

Printed  name  and  title  ■)  / 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 

TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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In  the  Matter  of  the  Application  of  the  United  i 
States  of  America  for  a  Search  and  Seizure  : 
Warrant  for  the  Premises  Known  and  Described  : 
as  (1)  502  Park  Avenue,  'lew  ; 

York,  New  York  10022,  (2)  Michael  Cohen’s  i 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  i 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  : 

Located  at  the  TD  Bank  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  ; 
I  ,oews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  ; 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  : 
(1)  an  Apple  iPhone  with  Phone  Number 
^^^^■and  (2)  an  Apple  iPhone  with  Phone  : 
Number 

Reference  No.  20 1 8R00 1 27  ; 


Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F .  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
— establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  eouise 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises- 1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  located  inside  the  building  at  502 

Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the  floor  of  the  building. 

Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.1  Additionally,  as  described  below,  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 

1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 


2017.08.02 


3 


is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I:  have  learned  that  thersafety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box  I  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Paik 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  fiom  January  8  to 
April  8, 2018.2  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  aLoews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  talcing  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  piesent. 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  Subject  Devices  )  aie 


particularly  described  as: 

— — - - — — Subject  Device- l  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone-number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 
District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  A1  &  1  with  the  telephone  number 


ased  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 


Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 


District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  leceive 


3  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  18DdTG.  §§  1 005  (false-  bank  entries),  1 014  (false  statements to- a  financial 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  ofNew 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 

emails  in  the  account  @gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 

between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant  ). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  d)  gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

- - cr - On  or  about  November  13,-2017-,-  the  FBI  sought  and'  obtained  a  search  — 

warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  account  (the  “Cohen  MDCPC  Account* )  sent  or 

received  between  the  opening  of  the  Cohen  MDCPC  Account4  and  November  13, 2017  (the  First 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.5  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

9.  On  or  about  February  28, 2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Thud  Cohen  Gmail  Warrant 

Wd  tKe  “SecbndXohfitrMDCPC  Wan-anf  l)—The  content  produced  pursuant  to  these  warrants-is- 

subject  to  an  ongoing  review  for  privilege  by  an  SONY  filter  team.6 

10.  The  emails  search  warrants  described  above  are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8,  2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

6  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

1 3 .  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  -a-transaction- intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

Jin  connection  with  ^^Jicquisition  of  the  taxi  medallions  securing  Cohen’s 

debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  lelieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  a  Hair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 

Premises  to^(a)  receive  documents  related  to  the  transaction  intended- to-relieve  Cohen  ofhisrtaxi 

medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below,  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below,  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  sucn  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses7 

— — - - - - - The  Bank-Fraud-Scheme - » - - — — - 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
1 6.  As  set  forth  in  detail  below,  in  20 14,  Cohen,  through  LLCs  controlled  by  him  and 
his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


7  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).8  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee- 1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Ubei  taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans  like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 

8  One  of  these  companies,  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondia  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  Iris  medallion  loans  for  approximately  $22  million,  which  - 
according  to  letters  from  Capital  One  in  Sterling’s  files — was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  oi'Cohen’ s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  addiess  for 
Subject  Premises- 1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1 .  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements.  Sterling  transferred  45  percent  of  Cohen  s 
taxi  medallion  debt  to  Melrose.9 


9  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190, 000.10  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

10  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870, 000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  accoiding 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Empl6yee-2rI  have  learned- that  Cohen  and  Sterling-Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.11  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 


the  loan  maturity  date  to  December  8,  2017. 

h.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 


Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named 


who  would  agree  to 


11  Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises- 1— as  collateral,  Cohen  transferred  Subject  Premises-1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 


corporate  taxi  medallion  entities  to 
for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition"  of  the  transfer  of  the  medallion-loans — and  because-Sterling-was-unfamiliai  with 

-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1, 2017,  Cohen  told  Sterling  Employee- 1,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  |.  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee-1  told 
that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 


term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  camefrom  Cohen  andthatGetzel  had  not-eonfirmed-its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.12 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and  , 

,  attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


12  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  and  |  The  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent  j  md  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,  would  borrow  $20,000,000 

from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  vas  to  acquiie  from 

Cohen. 

m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $  1 ,265,9 1 3  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and  1 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1.  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 

30,  20 17  (the  “September  2017  Financial  Statement”)r - 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.lj  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),1 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

14  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 

York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-  term  sheet. 
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time,  he  indicated  was  held  by  a  trust).15  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 

and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017  Cohen  stopped  paying 

— loan  payments  on  his  taximedallionToans  altogether^— According  to  Sterling-Employ ee 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohem  transaction  was  favorable  for  the  bank 

-  that  is,  that  vould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises- L  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subject  Premises-1.  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee- 1  on  or  about  January  24,  2018, 

15  Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen  transaction,  Cohen  would  “bring  all 

payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  the  closing  of  the  Cohen-  transaction,  Sterling  provide  a  letter 

stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-  transaction,  however,  did  not  close.  On  or  about  January 

29,-2018,  the  £  ’  attorney-emailed  attorneys-foHSterling  and  stated  that  “at  this- time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  leal  fell  apart. 

Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 20 1 8  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-  transaction.  Sterling  Employee-3  questioned  Cohen  about  the  price 

vas  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

- EfnCfi'dr  abouf  February  17^018;  Cohen  emailed  Sterling  Employee»3  and-proposed 

“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  1  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen  s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  foi  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose16)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at-First  Republic  Bank  (‘fFirst  Republic!!), _.and  then  received-millions  of  dollars Jn 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant — Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1  ”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


16  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrose  so  that 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-  | 
transaction.  Based  on  my  review  of  reports  of  interviews  with  Melrose  employees,  1  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-  ransaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  Fust  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic  s  know-your- 
customer  records  on  Cohen,17  his  primary  physical  address  is  the  address  for  Subject  Premises-1 . 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
C onsu Kants  Account’ ’) .  Cohen  was  the  only  authorized  signatory  on  the  accounts  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee-1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account  the  answers  to  which  Fiist  Republic 
Employee-1  entered  into  a  form18-- Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
WOrk,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — which  he  said  was  not  his  main  source  of  income  separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  and  does  not 


17  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

18  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee- 1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Hsscntial  Consultants  Account  schedule  and  public  sources,  1  know  the - 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  Februaiy  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  1 0,  20 1 7,  June  9,  20 1 7,  July  1 0, 20 1 7,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  RAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P .C.  (the  “MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.-35;  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  Septembei  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisoiy  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 

affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
EI  .C”  and  “MichaelD.  Cohen  &  Associates,  PC”  and  provided  the  address  lor  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8,  2017.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bank  in  the  name  ofEssential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appeal's  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants]^  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  fhe_US"and"any~other-issues  mutually  agreeable  to  [Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
interview  with  Getzel,  and  my  review  of  notes  and  1 

have  learned  the  following: 

— — — ar-In  orabout  May  -20T7rGetzel  met-with-Gohen-at  Subject-Premises-2.— At  the 
meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $  1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  properly),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [sic]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone-and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 

^ccount,respondedWGetzers  '^5ail"witlrthe  answer  “[l]ooks  good  to  meA-Cohen  never-directed - 

Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and 1 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterlmg’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 
Additionally,  as  of  February  X  20 18/ Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 

the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 

2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.1 8  in  an  account  at  Signature  Bank. 

As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  Februaty  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30,  2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank— one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13, 2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total;  as  of  September  30r2OF7rGohen  had  at  least  $4,713,935.08  in  his  accounts 
at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.19 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

19  Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Batik  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  T  Jnreported  Interest  Income 


24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  m 
interest  income  in  connection  with  that  loan-  But,-from-my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

2012,  Cohen  agreed  to  lend  ipproximately 

$2,000,000.2°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  andHHBrestated  the  promissory  note  to  increase  the  prmcipal 
amount  to  $6,000, 000.21 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terns  of  the  amended  and  restated 


20 1  learned  from  Getzel  that 

21  The  note  states  that  the  loan  is  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  rerein. 

34 


2017.08.02 


promissory  note,  Cohen’s  loan  to  s  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  to  pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requires  thai  epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 

of  the- amended— and— restated  promissory— note—^^|  has -made  monthly-  payments  of- 

approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 
from  an  entity  called  totaling  $6 1 ,250  per  month,  which  he 

deposited  into  his  personal  bank  account  at  Capital  One  Bank.22  It  appears  from  my  review  of  bank 
records  and  public  sources  that  is  the  owner  of 1 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  from  an  entity  called  i  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appeal's  from  my  review  of  bank  records  and  public  sources  that  s  also  the  owner  of  i 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


22  In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61 ,250,  but  iften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from 


to  Sterling  or  Melrose,  or  list  it 


on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant-about  the  income,  and  Getzel  only  learned  about  the  income  because  he 


began  doing 


taxes  in  2017.23 


25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 
Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 


in  order  to 


withheld  information  relating  to  the  interest  income'  he  is  receiving  from 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

rv»hen  Had  a  Side  Agreement  With. 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 


interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 


had  negotiated  with 


it  appears  that 


.greed  to  pay  an  above-market  price 


for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  Approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterlmg  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 


Employee- 1  to  Cohen  and 


Subject  Premises-1.  According  to  the  term  sheet, 
from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that 


The  term  sheet  listed  Cohen’s  address  as  the  address  for 


would  borrow  $20,000,000 
was  to  acquire  from 


s  Accordingly,  this  interest  income-which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns— is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-  transaction  and  the  new  loan  to  did 

not  mention  any  payments  from  Cohen  to^^^Binduding  a  $3.8  million  payment.  The - 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  igreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 
had  a  side  agreement  with  ■■Ho  pay  a  sum  of  money  for  entering  into  the 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 

according  to  Sterling  Employee-3,  the  price  that  was  paying  for  each  medalllon 

appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 

side  agreement — and  never  had  a  side  agreement  with  | 

27.  While  Cohen  and  did  not  disclose  any  payment  from  Cohen  to 

in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who' will  assume  their  bank  indebtedness,  upon  the  [Cohens’ |  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  paymentto  the  Buyer  of  $3,800,000  ”24 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 


payment  of  $3,800,000  to 
$3,800,000  to  pay 


but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 
As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 


cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 


Statement  that  he  had  $1 .25  million  in  cash. 


28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  1  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 

involved  in  the  potential  deal  with  Cohen  and 
side  payment  from  Cohen  tc 


was  aware  of  the  planned  $3.8  million 


The  Illegal  Campaign  Contribution  Scheme 


29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


^  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  him  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30  From  my  review  of  public~ sourceS7 1  have  learned  the  following. 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com.  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 201 1,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 
a  sleazy  and  disgusting  website. ...  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 

Stormy  Daniels  and  her  attorneys  for  then  honesty  and  swift  actions.  ’ 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  tide  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18, 2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
"accompanying  audio  in  which  Trump  feferfedlo  women  flrwhat  the  article  deseribed  as  ^ulgar- 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  othei 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
i„  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford. 

34.  From  my  review  of  telephone  toll  records25  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Aw<7m>er,26Tramp,andHope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  ovei  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


25  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  fiom 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

26  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

27 1  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  agam  for 
about  two  minutes. 

- 7y39lfnnrimmediately~after-the- second  call-with- Hicks-ended, -Cohen.called 

David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.  about 
three  minutes  after  ending  his  call  with  Peeker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  pan.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m„  now  on  October  9, 2016,  Cohen  sent  Howard  atext  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  1  formed  a  week  ago.  Whenever  you  wake, 

please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m„  Howard  sent  a  text  message 

to  Cohen^nd  Davidsoli,  whicH_stafedT“iCei11l/Michael:-connecting--you  both  in  regards  to  that 

business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m„  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  ate  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  m  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affiiir  with 

then-candidate  Trump.28 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 


28  As  set  forth  below  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
Howewir,  trecau^these  communications  were  in  close  temporal  proximity  *be 
the  negotiation  of  a  payment  to  CUfford,  the  execution  of  the  agreement  with  Clifford,  ™ ' 

°  n  -  riiffnrrl  T  believe  that  these  communications  weie  related  to  Clifford. 

SwoluyTa"^  on “ Sel Cements  by  McDougal,  I  have  learned  tat  she 
nioSXl  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 

investigation, TbeTievelhafDaviiisdirsasrCohen  this  partially-signed-Uside-letter-agreemenC’Jn 

older  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  fi-om  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participaaon  in  interviews  with  First  Republic  employees,  I  have  learned 

the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  am.,  Cohen  sent  Pecker  atext  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  am..  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  am.  and  9:06  am.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 

encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m„  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Cohsultanfs”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’ s  question  of  how  he  wanted  to  fond  the  account.  As  a  result,  the 

account  was  never  opened. 

c.  On  October  1 7,  20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 

Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.29  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  hei 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically. 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded.  Call  me. 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  lie  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Tramp  agam  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m.— less  than  thirty  minutes  after  speaking  with  Trump— 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  tire  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  .ha,  he  decided  no,  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  die  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  a,  Trump  Tower,  and  wanted  to  go  to  a  Firs, 

branch  acrossteSS,  to  open  the  account,  so  FEnCePbKrEmployee.J-calleMirst- 
Republic  Employee-1,  a  prefeired  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m.  First 
Republic  Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  Fust 
Republic  Employee-1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower 
on  fte  same  floor  as  the  Trump  Organize, ion-and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account-the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form-^ohen  suited,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  pan. 

e.  At  1:47  p  m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  A,  approximately  1 :49  pm.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  fr  om  a  home  equity  line  of  credit  that  Cohen  had  a,  Firs,  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  fimds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson, 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m„  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important  ”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  fluids  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 

minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account- 
whichhad  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit-to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9.47  a.m.,  stating.  I 

confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  aftei  you  l  eceive  FedEx 

will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 
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a.  On  October  28,  20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7f08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 

approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  mmutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  ‘Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 

receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4,  20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication— just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
fraction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,”  Pecker  and’Davidson.  Fof  instance,  at  approximately^^  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  ‘  The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m„  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statementby  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  statmg  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 

spoke  to  Trump. 

41 .  On  or  about  November  8,2016,  Trump  won  the  election  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 

have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 
Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 
Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  wilting  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mi'.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  t 
mean  that  it  doesn’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Tramps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whethei  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 

43.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kind  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  m 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen  s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’ slax  returns,  Tknow  Ke“lists~Kis  prim£ffy'residence  as-Subject  Premises-l .  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1 .  See  supra  ff  1 8(b),  1 8(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra ^  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen  s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  J  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  2014  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 


Bank. 


b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 


addressed  documents  relating  to  the 


transaction  and  Cohen’s  attempts  to  modify  the 


terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  see  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  f 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 

concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

-were  concealed  from 


records— such  as  records  relating  to  a  payment  from  Cohen  to 
Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises- 1  will  be  relevant  to  Cohen’ s  possession  or  knowledge 


of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  fl  18(b),  1 8(e).  Accordingly,  it  is  likely  that  Subject 
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Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 

existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  1  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  weie 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  1 16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”30  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 


30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  m  overseas  entities  on  is 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  fixture  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen  s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  bank  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises-1. 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  address  for  Subject  PremiW-lT“5ee  ^19  (cpTherefore,There  is  probable  cause -to 

believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consultmg 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzel’ s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’ s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  1  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises- 1.  Accordingly,  Subject 
Premises- 1  is  likely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 

iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBook  Pro  to  access  his  iCloud  account Based  on  my  review  of  location-records  provided  by 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j .  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 

understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  emad 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  fomishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.31 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
andmyr  eviewof fhe  press  release  on  SquifeTPatton  Boggs’s  website,  T  know  that  Cohen  hasan 
office  at  Subject  Premises-2.  See  supra  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.  See 
supra  f  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs  s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

31  As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

- 497 - There  is  also  probable  cause  to'believerthat  Subject  Premises-2  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  U  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  ff  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
produced  pursuant  to  theCohen  Emaif  Warrants,  as  weHasTny-participationin  an  interviewwith 
Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  1 20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 

and  information  regarding  his  finances  will  be  found  m  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-such  as  contracts  with  clients 
and  records  of  payments-at  the  business’  identified  location.  1  am  not  awar  e  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 
will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular. 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
20l7,  as  Cohen  was  receiving  substairtial  income  ffonfconsulting  work— which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date/’  Based  on  my  review  of  toll  lecords,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


32  The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P .M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5 :35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subj  ect  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealing  with  Keith 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  construction  workers  would  be  present.33 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  ff  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  Iff  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  Tf  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30, 2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 
16(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiationswithSterling  with  him  to  Subject  Pferhises-4,  in  order  to  reference  and 
consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  legaiding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrantsoughtherein  are  executed.  IfCohen  is  within  Subject  Premises-4  atthatmoment,  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
^f  ColienTs  not  within  Subject^aidses-4  at  that  mometflTffieliwi^^wiUdilcely  be  onhis^person;^ 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subj ect  Premises)  at  the  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 

evidence,  fiuits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 

Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 

evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 

pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 

data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 

MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  piobable 

cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  then  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subject  Premises-1,  Subject  Premise-2  and  Subject  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  theft  financial  transactions  to 
their  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contam  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  theft  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and, experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

®  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

»  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted”  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  remains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  media 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

®  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 
the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
con*espondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 

associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  nd/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and  any  payments  by  ;o  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  libouF  the  Access  Hollywood  fape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

TIT.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of reasons: 

@  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

©  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 
modification  or  destruction,  computer  devices  are  ideally  examined  in  a  controlled^ 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

@  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  from  a  computer 
device’  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  tire  investigatk^ui^  collect  evidence 

in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  from 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  m 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlook  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (eolleetively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  an,  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

63 .  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted;  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
Ti  the  event  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 
available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 


69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review'the  ESI  contained  thereiiTfoTinformation  responsive  to  the  warrant. 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

®  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

@  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance); 

•  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

•  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation34;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


34  Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  properly 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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71 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  determines  that  the  electronic  devices  are  no  longer  necessary 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (h)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
,he  terns  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 

Court  orders  otherwise. 


i 


Special  Agent 
FBI 


Sworn  to  before  me  on 


8th  day  of  April,  2018 


/?/  T £  L,~ 


,  ) 
\\JiOV 


*/ 


hon.henrV  b.  pitman 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 


I,  Premises  to  be  Searched — Subject  Premises**! 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Apartment  located  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  if  the  building. 


H.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 


The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.'S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ind/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throug 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

„nH  and/or  entities  controlled  by  the 
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and  any  payments  by  to  Cohen,  from  January 

1,  2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker;  and/or  Dylan-Howard-abouf  Donald  Tramp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/ or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan l  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  ^nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 


q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.  A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pio 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartp  o 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  leview. 

The  items  to  be  seized  from  Subject  Premises-1  also  include: 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or-  copied- computer  devices  onstoragejnedm, — 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  foi  example. 

@  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

©  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


e  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
U.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 

,  ,  .  mc„u;pnt  Premises-2”)  are  described  as  follows,  and  include 

The  premises  to  be  searched  (  Subject  ttemises  z  j  aic 

electronic  devices,  and  all  locked  and  closed  contamers  found  theiern. 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 


II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  Iron,  Subject  Premises-2  are 
.1  •  p  iq  tt  c  r  88  ^71  (consniracv  as  it  pertains  to  the  othei  Subj  )* 

of  violations  of  18 i  U- •  •  §§  /  ,  financial  institution),  1343  (wire  fraud),  and  1344 

^  "-d  52  USC  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  eampatgn 

contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for r  Mich ,ael  Cohen  ^Eor 
entities  associated  with  hta  to  tmn sfer  anv  interest  W-  ^  " 

liabilities,  to  others,  including  to 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

j  Pvidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including s  any  documents 

o^evidenc^e  of  th^pu^pose  of  accounts^oprme^intheVame  ofMichaeUD.  Cohen  &  Associates.  ’ 

•  i  i  +*  fn  Tniipri’s  net  worth  available  cash  and  cash  equivalents, 

££?  "““tom  W, 

2013  to  the  present. 

a  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
,  ,  and/or  entities  controlled  by 

Cohen  and 
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and  any  payments  by 


:o  Cohen,  from  January 


1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  01 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ j  Evidence,  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Tramp  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

1  Evidence  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present* 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II. A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 


1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  mediae 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  m  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff;  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  mformation  responsive 

to  the  warrant. 


In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 


a  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  mark  ings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

a  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whethei 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
H.A  and  H.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  C 


I.  Premises  to  be  Searched— Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  th^D  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  4  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


H.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wn-e  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows. 


1  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1,  2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


6  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 


forth  in  Section  n(A)(l)-(8),  above. 


C.  Review  of  ESI 


Following  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 
include  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  ou  si  e 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 


.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 


a  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 


a  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authonzed  to  conduc 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 


Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein. 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

II.  Items  to  Be  Seized _ ___ _ _  _  _  _ _ _ _ =. 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  anv  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &■  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  in  d/or  entities  controlled  by 
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and  any  payments  by 


to  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/oi 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., _ 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose ;  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose ;  oi  natoeof  <  y 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within dhe  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  , 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartpho 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  foi  latei  leview. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  ^information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  01  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

a  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

©  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

©  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

@  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device- 1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-1,  or  hold  Subject  Device-1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device^  authorized  by  this  warrant. 


H.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 


a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


and/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 

and  any  payments  by  J  |o  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

agents  or  legal  representatives,  including  any_pondisclosure  agreements  and  related  documents, - 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tramp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

lc.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and / or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 


If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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ATTACHMENT  F 

I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 

H.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officeis  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Cohen  and 


^^^Evidenc^relatin^t^aereements,  loans,  and/or  financial  transactions  between 


and/or  entities  controlled  by| 
and  any  payments  by  :o  Cohen,  from  January 


l,  /ui/  to  tne  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements.  and  related  documents,, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 

United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  j 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  j  Case  No. 

Four  Premises  and  Two  Electronic  Devices,  See  ) 

Attached  Affidavit  and  Riders  j 

APPLICATION  FOR  A  SEARCH  WARRANT 

I  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

See  Attached  Affidavit  and  Riders 

located  in  the  Southern  District  of _ New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDERS. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check one  or  more): 
evidence  of  a  crime; 

fif  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
sf  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  U.S.C.  s  371,  1005,  1014,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial  institution, 

1343  and  1344,  and  wire  fraud,  bank  fraud,  and 

52  USC  30116  and  30109  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

|V|f  Continued  on  the  attached  sheet. 

□  Delayed  notice  of _ days  (give  exact  ending  date  if  more  than  30  days: _ )  is  requested 

under  1 8  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


Printed  name  and  title 


Sworn  to  before  me  and  signed  in  my  presence. 


City  and  state: 


Hon.  Henry  B.  Pitman,  U.S,  Magistrate  Judge 

Printed  name  and  title 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  (1)  502  Park  Avenue, .  'Jew 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
_^-k.  New  York  10112,  (3)  Safe  Deposit  Box  # 
Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 

TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 

Application  for  Search  and  Seizure 

Warrant 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein,  and 
the  Electronic  Devices  Known  and  Described  as 
manApple  iPhone  with  Phone  Number 

|and  (2)  an  Apple  iPhone  with  Phone 

Number 

Reference  No.  2018R00127 

■ 

SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 


deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  4 1  of  the  Federal 

Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  Ehave  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1 ,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  located  inside  the  building  at  502 
Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the  floor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.1  Additionally,  as  described  below,  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  101 12.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 

Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 
branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  I'D  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box  |  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1 728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 20 1 8.2  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present.3 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 


Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 


particularly  described  as: 

a.  Subject  I  )cvice- 1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 


maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  m  the  Southern 


District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
|  Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


3  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§~  1005  (falseTbank  entries)',"  1014  (false  statements  to  a  financial 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”), 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 

emails  in  the  account  ]  r4gmail.c0m  (the  “Cohen  Gmail  Account”)  sent  or  received 

between  January  1, 2016  and  July  18,  2017  (the  First  Cohen  Gmail  Warrant  ). 

b.  On  or  about  August  8,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  @gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  ()n  or  about  November  13  ,  20 177  the' FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant  ). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account  1  (the  “Cohen  MDCPC  Account”)- sent  or 

received  between  the  opening  of  the  Cohen  MDCPC  Account4  and  November  13,  2017  (the  “First 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7, 2018,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.5  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 20 1 7  and  February  28,2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Warrant”).  The  content  produced  pursuant  to  these  warrants  is 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.6 

10.  The  emails  search  warrants  described  above  are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish ,”  to  determine  the  location  of  Subject 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

6  On  or  about  February  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 

8 


2017.08.02 


campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  ‘relieve  _C‘ohen  of" 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

|  in  connection  with  acquisition  of  the  taxi  medallions  securing  Cohen  s 

debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  hisdaxi 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below,  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen  s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses7 

The  Bank  Fraud  Scheme 

(i)  Cohen ’s  Statements  to  Sterling  National  Bank 
16.  As  set  forth  in  detail  below,  in  20 1 4,  Cohen,  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling  )  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  ofthose  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


7  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).8  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  m  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  m  the  loan  amount 

8  One  of  these  companies,  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,20 1 4,  each  of  Cohen’ s  sixteen  taxi  medallion  I.I.Cs  entered  into  loan  agreements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises- 1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises-1.  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements,  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.9 


9  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 

conservatorship  by  the  National  Credit'Union  Administration  (  NCUA  ). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.10  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favoraMy  because,  accounting 'foFloan  payments,  cash’  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

10  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 

interview  witiFStefling  Employee-2cI-have_learned'that”Cohemand_Sterling_Employee=2"  spoke 

again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  20 1 5 
and  November  2015,  Sterling  raised  the  possibility — both  internally  and  with  Cohen  of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.11  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments.  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 
the  loan  maturity  date  to  December  8, 2017. 

h.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  Fred  Weingarten,  who  would  agree  to 

11  Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence— 
Subject  Premises-1— as  collateral,  Cohen  transferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  knowthatby  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallion  entities  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans— andbecause  Sterling  was  unfamiliar  with 

— Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee-1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 

amount.” 

i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  •  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 20 17,  Sterling  Employee-1  told 

that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee- 1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  noCconfirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence.12 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee- 1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and  Allen 
Weingarten,  attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 

12  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  anc 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises- 1 .  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent  J  and  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet,  1  ould  borrow  $20,000,000 

from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that 


Ivas  to  acquire  from 


Cohen. 

•  m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $  1 ,265,9 1 3  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  [transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCTJA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 


6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 


30, 2017  (the  “September  2017  Financial  Statement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.13  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),14 
$3,200,000  in  real  estate  investments,  and  his  $11,000,000  personal  residence  (which,  for  the  fiist 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

14  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-Weingarten  term  sheet. 
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time,  he  indicated  was  held  by  a  trust).15  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 

records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Steiling 
with  these  financial  statements — i.e.,  in  or  around  September  2017  Cohen  stopped  paying 
monthly  loan  payments  on  histaxi  medallion  loans  altogetherr  According  to  Sterling  Employce- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  20 1 7  memorandum)  that  the  Cohen-  xansaction  was  favorable  for  the  bank 

-  that  is,  that  would  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises- 1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subj  ect  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

15  Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-  transaction,  Cohen  would  “bring  all 

payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 20 1 8,  that  at  the  closing  of  the  Cohen-''  transaction,  Sterling  provide  a  letter 

stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-'  transaction,  however,  did  not  close.  On  or  about  January 

29  2018,  the  attorney  emailed  attorneys  foFSferling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  deal  fell  apart. 

Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-  transaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

|as  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  31,2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

- „ — u.  On  or  about  hebruary-1^2018,  Cohen  emailed  Sterling  Hmploycc-3  and  proposed 

“[p]ayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
Hnhe.n  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 
17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose16)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  ■  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  afFirst  Republic  Banin“F^t  RePublte”)^and  then  reccivcd  millions- of-dollars  in 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  accountant— Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 

following: 


16  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose ,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrose  so  that 

Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-J^  . 

transaction.  Based  on  my  review  of  reports  of  interviews  with  Melrose  employees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen-1  transaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen,17  his  primary  physical  address  is  the  address  for  Subject  Premises-1. 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 
Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form18 — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business— which  he  said  was  not  his  main  source  of  income— separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive  and  does  not 


17  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  3 1  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

18  First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee- 1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  !  know  the 

following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (  Novartis  ). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  1 0,  20 1 7,  June  9,2017,  July  1 0,  20 1 7,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 

sent  is  Korea~Aerospace  Industries-Ltd.-(2KAT’-). . KAI-is-ZuSouth  Korea-based  company  that - 

produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0, 201 8,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises- 1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
20 1 7,  to  on  or  about  January  2, 20 1 8,  the  MDC&A  Account  received  $426,097 .70  in  deposits,  and 
the  balancem  the  account  as  of  January  2,  2018;"w5s  $344,541.35.  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 
during  the  negotiations  with  respect  to  the  transaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 20 1 7 .  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services’  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1 .  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 


Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1 ,  20 1 7,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any- other— issues  mutually  agreeable  to  [Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
with  Getzel,  my 
have  learned  the  following: 

_ _ _ _a _ Imor- about  May  -2017, -Getzel  met-with-Cohen-at-Subject  Premises-2 — Atthe 

meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [sic]  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6,2017,  Cohen  called  Getzel  by  telephone  which  is  reflected 
on  toll  records  for  Cohen’s  cellphone— and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  "[IJooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  In  a  letter  dated  October  6,  2017,  addressed  to  Getzel,  Cohen  stated,  “I  have  reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterlmg  m 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and| 

21 .  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterlmg 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
•telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017. 
Additionally,  as  (>f  Febfuafy  l'r2018,  Cohen  Had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned 
the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.1 8  in  an  account  at  Signature  Bank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  j  oint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 


e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 20 1 7,  Cohen  had  $  1 7,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank — Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

- h.  In  total,  as  of  September  SO^OFZyCohen  had  at  least  $4,71 3,935.08  in  his  accounts 

at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.19 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

19  Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 


24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  myrevicw  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

20 12,  Cohen  agreed  to  lend  j  approximately 

$2,000,000?°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  by  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  20 1 5,  Cohen  and  restated  the  promissory  note  to  increase  the  principal 

amount  to  $6,000,000.21 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


20 1  learned  from  Getzel  that 


21  The  note  states  that  the  loan  is  to 
jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to 
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promissory  note,  Cohen’s  loan  to  s  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  require  to  pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  Aprd  2019.  The  note  also 
requires  that  ‘epay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 
of  the  amended  and  restated  promissory  ribteT^J  has  made  monthly  payments  of 


approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 
from  an  entity  callec  staling  $61,250  per  month,  which  he 

deposited  into  his  personal  bank  account  at  Capital  One  Bank.22  It  appears  from  my  review  of  bank 
records  and  public  sources  thai  is  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  from  an  entity  called  totaling 


$61,250  per 


r  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 


from  my  review  of  bank  records  and  public  sources  that 


appears  trom  my 


is  also  the  owner  of. 


In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 


in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 


Statements,  my  review  of  his  20 1 5  and  20 1 6  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


22  In  April  20 1 5,  Cohen  received  a  pro-rated  payment.  F or  all  months  thereafter,  the  total  payment 
equaled  $6 1 ,250,  but  often  made  the  payment  in  multiple  checks. 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 

payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 

entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,' upon  the  [Cohens’  |  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800, 000.”24 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 


payment  of  $3,800,000  to 
$3,800,000  to  pay 


but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 
As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 


cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1.25  million  in  cash. 

28 .  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and®  vas  aware  of  the  Planned  $3 -8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  US  AO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


24  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $  130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  from  my  review  of  public  sources',  I  have  learned  ihe  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine ,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 201 1,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  El  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 
a  sleazy  and  disgusting  website. . . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in- which  Trump  referred  to-women-in-what  the  article- described  as  “vulgar - 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate ,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  20 1 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants :  “In  October  20 1 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records25  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  thcnationalHnquirer,26Hmmp;-mdHope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  fromHicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


25  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

26  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

27 1  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  im mediatelyTifter  the  second" call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 

other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hides  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said. 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 

42 


2017.08.02 


believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3 :3 1  a.m.,  now  on  October  9,  20 1 6,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated": '"Keith/Michaef:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.28 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 

28  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 


2017.08.02 


44 


b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  wantan  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.29  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 

agreement  and  whether  Clifford  would  go  public.  Specifically. 

j  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  frump  to  the  Daily  Mail,  a 

tabloid  newspaper. 

jj  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach? 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  emai 
referenced  in  this  article. 
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investigation,  I  understand  Howard’ s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6 :49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Porn 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford..  However,  the 

article  noted  that  Clifford  had  declined  to  comment.  _ _ _ 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 :04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  yon  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  F irst  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  “open  the  account,  so  FifsfRepublic_Employeer-2"calledFfrst' 
Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m.,  First 
Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  in  Trump  Tower 
on  the  same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
I  loward  a  text  message,  stating:  “Please  call  me.  Importanf.’”' Cohen  called  I  Ioward  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000— with  the 
funds  intended  for  Clifford— for  die  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 

your  assistance  and  look  forward  to  hearing  from  you  later. 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account— 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit  to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating.  I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 
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a.  On  October  28, 2.0 16,  at  11 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  3 1,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KID.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  2018,1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,  was  Cohen  s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  pictureof  a  FedEx  delivery  confirmation,  statingtKaf  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Tmmp  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m..  Hides  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  stoiy  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 
spoke  to  Trump, — — — — - - — — - - - - - - . — 

41.  On  or  about  November  8, 20 1 6,  Trump  won  the  election  for  President  of  the  United 

States. 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  201 8,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  201 1  story  of  an 
alleged  affair  between  Mi-.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  1  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn’t  create  harm  and.  damage.  1  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (?...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016, 1  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank. 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kin4  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises- 1 .  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises- 1.  From  my  review  of 
Cohen’s  tax  returns^-!  know  he  lists  his  primary  residence  as  SubjeGt-Premises-1 .  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-1  as  his  home.  For  example,  on  or  about  September  28,  2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra  *\ 1 19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  ^  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 
I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion -LLCs*  the  revenue  that  tho.se  medallions  generate,  and  the 
transaction  with  Sterling  in  2014  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 

addressed  documents  relating  to  the  transaction  and  Cohen’s  attempts  to  modify  the 

terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  see  supra  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  ransaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  from  Cohen  to^^^^l  -were  concealed  from 

Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises- 1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 
existence  of  funds  in  accounts, 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  B  ank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  records  relating  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supra  If  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”30  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3, 1  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  bank  records,  there  is  probable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises-1 . 

f.  Based  on  my  review  of  records  maintained,  by  AT&T  and  produced  pursuant  to  the 

Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 
is  the  address  lor  Subject  Premises-1.  See~sujpra%  19(c):_Theref6rerthere-TS'probable-causeto  ~ 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzel’ s  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’ s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  f  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 

Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  know  that 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises- 1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson”  and  “EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises- 1  is  likely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 
pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBook  Pro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises-1 ,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.31 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 

_ andmy  review  ofthe  press  release-on  Squire.Patton  Boggsis_website,-I  know-thatCohen  has  an — 

office  at  Subject  Premises-2.  See  supra  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  in  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  Tf  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

31  As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen’s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

_ 49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
■  emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  If  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  fflf  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  2018  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
produced  pursuant  to  the  Cohen  Email  Warrants7:  as  well  as  my  participation  in  an  interview  with 
Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  ^  20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
.  Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business— such  as  contracts  with  clients 
and  records  of  payments — at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 

will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular. 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
2017,  as  Cohen  was  receiving  substantiaf  income  from  consulting  woffe=which  he  did  not  disclose 
to  Sterling— Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 

out  of  vault  at  approximately  5:39  on  that  date.32  Based  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 

32  The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P  M  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’s  two  visits  to  the  vault-  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson’s 
client  -  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealing  with  Keith 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 

to  leave  in  his  apartment  where  construction  workers  would  be  present.33 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Warrants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 

instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  fl  42(a)-(e).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 


33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however  a  smdi  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  othei 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 
For  example,  on  January  30,2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra 

1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling  with  him  to-Subjeet  Premises-4,Tn  order  to  referenee  and 
consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini, 
and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  -  Cohens’  permanent  residence  -  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 
electronic  devices,  including  Subject  Device- 1,  Subject  Device-2,  and/or  certain  Apple  products, 
that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appeal's  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  at  that  moment,  Subject 
Device- 1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment, "the  devices  williikely  be  on  his  person, 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device-1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 
Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  their  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 
Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subj  ect  Premises- 1 ,  Subj  ect  Premise-2  and  Subj  ect  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 
IheiiT^vice^TA  is  probable  cause  to  raiev^thir^ 

contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 

did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  “chats”  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

•  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and.  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

.  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recovered  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  “deleted’  on  a  home. 

_ computer,  the  data  contained  in  the  file  does  not  actually  disappear,  bin  instead  remains 

on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  die  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 
pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  storage  me  la 
depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user  s 
operating  system,  storage  capacity,  and  computer  habits. 

•  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition  users  often 
keep  backups  of  their  data  on  electronic  storage  media  such  as  thumb  drives,  tlas 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Section  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc|^^^H*n<i/or  entities  associated  with  him. 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 

with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and  any  payments  b\  to  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 

publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

n.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 

contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

i 

financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  pmpose  or  nature  of  any 

financial  transactions  involving  that  financial  institution, 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  41(e)(2)(B)  provides  that  a  watrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 
of  reasons: 


•  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  search  location. 

•  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 
modification  or  destruction,  computer  device.? 'arc'  ideally  examined  in  a  controlled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 

,  subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

•  Third,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  from  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  time  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein.  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs's  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  neeessarr  to  retrieve  and  preserve  the  evidence,  the  Government  will  return  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
-pr^s^d  involved  in  the  investigation,  including  attorneys  forffirGbvemmentrcollectevidence 
in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate  and  apart  ftom 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  ,s 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device  s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  training 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protectthe  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  or  restarted,  (2)  when  more 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  are  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  usei  s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 

^Tthu^venCdhaT  is  unable  to  unlock  the 

within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  requiring  the 

entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  training  and  experience,  and  my  review  of  publicly  available 

materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subj  ect  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  th 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 

the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  die  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  die  status  of  the  investigation  and 
related  proceedings,  attorneys  for  die  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review  the  ESI  contained  therein  tor  infoimHion  responsiWdJTthe warrant! 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 


techniques  may  include,  for  example: 

.  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  tire  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  dJermine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

.  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

.  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determinedie  existence  and  location  of  data  potentially  related  to  the  subject  matter 

the  investigation34;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


34  Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one >  thing 

"to  S^Tbut  that  is  not  captured  by  a  keyword  search  because  the  mformatron  does  not 
contain  the  keywords  being  searched. 
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7 1 .  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  m  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  ( iovernment  determines  that  the  electronic  devices  are  no  longer  necessary 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  these  items,  upon  request. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (Hi)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 

Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise.  ^ 


FBI 

Sworn  to  before  me  on 
8th  day  of  April,  2018 

J  H-Cv\  cy  ft. 

HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 


I.  Premises  to  be  Searched— Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartment  ocated  inside  the  building  at  502  Park  Avenue  New  York,  New  York 
1 0022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building,  u  jec 
Premises- 1  is  located  on  the  floor  of  the  building. 

II.  Items  to  Be  Seized _ _ _ _ __ _ _ _ _ _ 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence  fruits,  and  iMtoimentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  othei rSubject 
(■false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wue  fiaud),  and  13 
K  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  entitlCS  associated  Wlth  him' 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 

of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  arid  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 
- fcnd/or  entities  controlled  by  the  ■ 


Cohen  andl 
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I,  and  any  payments  by| 


I  to  Cohen,  from  January 


1,  2012  to  the  present 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Khren  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  ,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

F.viitencc  of  communications  between  Michael  Cohen  and  American  Media  Inc., 


_ _ i  M/viaencc  ui  ~  - -  - -  c  i _ ■ _ 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 

Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  Idle  purpose . or  nate i  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II. A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoo  r  , 
any  ol;  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 

devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. - — 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  marldngs  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information, '  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files 
documents  or  other  electronically  stored  information  within  the  categories  identified  m  ec  ion 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  comic 
a^cmmplete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  .ts 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
anv  attorney-dient  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  includ 
use  of  a  designated  “filter  team”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd [  floor  of  the 
building  at  30  Rockefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  jaw  inn 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  buildi  g 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

H.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  tom  Subject  Premises-2  are  evidence  fruits  and (i— ntalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other -Sublet  Offiosa),  005 
(false  bank  entries)  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  i 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  c“h“ 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medalhons,  and  any  associated  debts 
“abilities,  to  others,  including  tr^B  and/or  enttt.es  assoetated  wtth  htm. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants >  ^  the 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen 
or  evidence  of  the  purpose  of  accounts  opened  m  the  name  of  Michael  D.  Cohen  &  Associates. 

f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalent^ 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  oMhroug 
entities^  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

2013  to  the  present. 

Evidence  relating  to  agreements,  loans,  and/or  financial  transacting  between 

and/or  entities  controlled  by 


Cohen  and 
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and  any  payments  by 


to  Cohen,  from  January 


1,2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  _  Evidence  of  communications  between  Michael  Cohen  and  American  Media  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  , 

present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  . or  nature  °  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.  A  of  this  Attachment  above,  including,  but  not  limited  to,  any  esc  op  ^ 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Co  en 
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or  in  his  possession  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants 
to  HeuTSg  4  such  computer  devices  or  storage  media,  this  warrant  also  authonzes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include. 

1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 

computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryt ’ 10 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  informa  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storagl  media,  including  any  hardware  or  software  manuals  or  other  ^formation 
concerning  the  configuration  of  the  seized  orcopied  computer  devices  or-storagc  media 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff  agency 
^“assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  mformation  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
mformation  responsive  to  the  warrant,  including,  for  example: 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  draw 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation,  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  con  u 
a^ complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  anduted ^pmsuaat 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  deseed rto  protect 
anv  Xmey-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
us l  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  m  order  to  ad  ess 

potential  privileges. 
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ATTACHMENT  C 


I.  Premises  to  be  Searched— Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  thcJD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  #  |  The  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 


n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence  fimta,  and  tai^mmtaliUes 
of  violations  of  18  U.S.C,  §§  371  (conspiracy  as  it  pertains  to  toe :ote ^ed  Offenses^ 

/Take  bank  entries')  1014  (false  statements  to  a  financial  institution),  1343  (wit e  baud), 

S  "and  52  US.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (Hlegal  car.pa.gn 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen's  net  worth  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013 

present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  ! Me cDougah .  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Can.pa.gn,  Stephame 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  po.ent.al  sources  of  negahve 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 


forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 


information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

.  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrencfs  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation,  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

r  _w  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 

S B  “ri^edTo 

a^^mptete^reviewof  ah  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

AHditionallv  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
estblished  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 

11 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
USe  of  a  designated  “filter  team  ”  separate  and  apart  from  the  investigative  team,  in  or  e 

potential  privileges. 
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ATTACHMENT  D 


I.  Premises  to  be  Searched — Subject  Premises-4 


The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1 728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Akenue  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

II.  Items  to  Be  Seized _ : _ - _ 


A. 


Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 


The  items  to  be  seized  from  Subject  Premises-4  are  evidence  fruits  t md  instrumental^ ities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the r  othei >  Subject  Often  ),  00 
tfake  bank  entries!  1014  (false  statements  to  a  financial  institution),  1343  (wire  baud),  ana  _ 
«  feud)  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 

contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen ^and/or 
entities  associated  with  him  to  taxi  medallions,  and  any  associated  deb 

Mhties,  to  others,  including  * nd/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  fern  Essential  Consult^  m&ena 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultan  . 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  ^soc£  s, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associat  . 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


cr  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

1/  ^  Aik-1  Kx 


Cohen  anc 


Imd/or  entities  controlled  b> 


),  and  any  payments  by 


to  Cohen,  from  January 


1,2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documen  s, 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen.  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDouga  , 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

_ j  Evidence  of  communications  between  Michael  Cohen  and  American  Media  Inc 

David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  ep 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  nega 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  • 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

n  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
ZrraLdarin^tion;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  offends  flowing  into  an  account;  or  fee  y 

financial  transactions  involving  that  financial  institution,  from  January  1, 201 3  to  fee  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  mediathat  ma,  contain  any  electronically  stored  information  falling  within  fee  eategor.es 
set  forth  in  Section  II  A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  P  , 
any^ other0 desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives  d  si 
drives  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
mstoragemedia,  4k  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 


The  items  to  be  seized  from  Subject  Premises-4  also  include: 


1  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copie 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  envryp  'on 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similai  informati  . 

2  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storagl  media,  including  any  hardware  or  software  manuals  or  other  formation 
concerning  the  eonliguratiori  of  the  seized- or  copied  computer  dev.ccs  or  storage  media. 

3  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  ^e  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  alt omey 
nersonnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  un 
govmimentcontnfl)  are  Lhorized  to  review  the  ESI  contained  therein  for  information  responsive 

to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

.  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

.  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

.  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

.  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


15 


2017.08.02 


Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents  or  other  electronically  stored  information  within  the  categories  identified  in  Sec  ions 
TT  A  and  II B  of  this  Attachment.  However,  law  enforcement  personnel  are  authonzed  to  con 
a  complete  review  of ill  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  rts 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  deigned  to  piote 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 


i. 

I 
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ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Durum  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 

to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  thus  warrant. 

H.  Review  of  ESI  on  the  Subject  Device 

T  aw  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 

“*=' lionised' t  ”^e"“(fal2 

*  i  +*  o/^fisTT  Q  C  88  371  (conspiracy  as  it  pertains  to  the  other  Subject  On  )9  ^  1 

violations  ot  lo  U.o.O.  §§  v  P  *  .  1  .  ,*  \  a*  Hep  frauds  and  1344  (bank 

Sr^dtu^.cS  "Xl)(k)  “l09(d)(l)(A)(l)  (illegal  campaign  contributions) 

(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  c°hen  Md/or 

entities  associated  with  him  to  transfer  ^thfrs^so^ted^i^hhm^^ 

liabilities,  to  others,  including  tc  ana/or 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  01 
Essential  Consultants. 

e  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
Cohen  &  Associates. 
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f  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  equwdente, 

monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  throug 
entities!  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

and/or  entities  controlled  by  - 

and  any  payments  by  tl  |;o  Cohen,  from  January 


1, 2012  to  the  present. 

h  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDongal,  or  their 
agents  or  1-gal  representatives,  including  any  nondisclosure  agreements  and  related  documents^ 
and  any  communications  related  to  such  agreements. 

i  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  iociates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDongal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

i  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc 
David  Pecker,  rnd/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campatgn,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign, 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 

present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  “ 

that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 

financial  institution;  the  source  of  funds  flowing  into  an  account;  or  die 

financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-1  is  no  longer  necessary  to  retrieve  and 
oreserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upo 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
^  “y-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  morderto  ad  ress 

potential  privileges. 
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ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows*. 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
During  the  execution  of  this  search  warrant,  law  enforcement  personnel  “e  t0 

to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  thiawairan  . 

XI.  Review  of  ESI  on  the  Subj  ect  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 

mmsfMMm 

violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertams to  the  otter  Sub ect  Often  Jj  u44 ' 
bank  entries'!  1014  (false  statements  to  a  financial  institution),  1343  (w  ),  .,  ,  , 

l  52  U.S.C.  §§  301 16(a)(1)(A)  and  301 09(d)(l)(A)(l)  (illegal  ctunpargn  contrrbutrons) 

(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1 ,  20 1 3  to  the  present. 

b  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen 1 

entities  associated  with  him  to  ttans^anjnntgjin^^  ^^^g^godatedwit^hhm^  ^ 
liabilities,  to  others,  including  to  na/(J1  enu 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  ^documents  or 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 

L°, nle  of  Michael  D! 

Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  , 
2013  to  the  present. 

^^Kvidenc^clatin^^agreemMits,  loans,  and/or  financial  transactions  between 
Cohen  anc  md/or  entities  controlled  by 

and  any  payments  by  to  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
_  agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

1  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 

request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 

potential  privileges. 
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AO  93  (SDNY  Rev,  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

502  Park  Avenue,  Apartment  New  York,  New  York 
10022,  and  any  closed  containers/items  contained 
therein,  See  Attachment  A 


,1  ftlAG 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  pr^^^  to  be  searched  and  give  its  location): 

502  Park  Avenue,  Apartment  New  York,  New  York  1 0022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  o 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  /  jOf  A  A  —  /  Jp  , 

'  f  }  >*Y‘  (not  to  exceed  14  days) 

in  the  daytime  6:00  a.m.  to  10  p.m,  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established.  ; ;  ^  /./'..•/  '.Y  y  '  \ 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  lor  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  properly  was  taken,  or'  leave  the  copy  arid  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant*  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  reton,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor _ days  (not  to  excee,d  30). 

□until,  the  facts  justifying,  the  , laterspecific  date  of  _ 


Date  and  time  issued:  !■/  jjr '~/  $ 


City  and  state:  New  York.  NY 


‘J  ■■ 

I  -  I  *  /  Judge  V  signature 

vV  h  ;■ 

■  Hon.  Henry  B.  pitman,  U.S.  Magistrate  Judge 
'  ■  ’  Prinied  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


_  Certification _ _ _ „ 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 


ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-l”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartment^^Hlocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  ^^|of  the  building. 

H.  Items  to  Be  Seized 

- At — EvidencerFruits^and  Instrumentalities  of  the  Subject  Offenses - 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  £11113,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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and  any  payments  by  to  Cohen,  from  January 

1, 2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign.,  Stephanie. 
Clifford,  and/or  Karen  McDougal. 

lc.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  HA  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoolc  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises- 1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

@  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

©  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

©  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessaiy  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

502  Park  Avenue,  Apartment  New  York,  New  York  } 

10022,  and  any  closed  containers/items  contained  ' 

therein,  See  Attachment  A  ' 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  theprovertv  to  be  searched  and  give  its  location )\ 

502  Park  Avenue,  Apartment  New  York,  New  York  10022,  and  any  closed  containers/items  contained  therein, 
See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 


Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

“  IJSMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ufor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  A-S-fr  [d  Hrqcy  fa  PD-Wui _ 

»  1  f  Judge ’s  "signature 


City  and  state:  New  York.  NY 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made 

in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer's  signature 


Printed  name  and  title 


ATTACHMENT  A 


I.  Premises  to  be  Searched — Subject  Premises-1 

The  premises  to  be  searched  (“Subject  Premises-1”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Apartmenl^^Blocated  inside  the  building  at  502  Park  Avenue,  New  York,  New  York 
10022.  The  building  located  at  502  Park  Avenue  is  a  32-floor  brick  residential  building.  Subject 
Premises-1  is  located  on  the  ^^(of  the  building. 

II.  Items  to  Be  Seized 

_ A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses _ _ _ 

The  items  to  be  seized  from  Subject  Premises-1  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


and/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  andl  and/or  entities  controlled  by 
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and  any  payments  by 


1,  2012  to  the  present. 


:o  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/ or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises- 1  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises- 1  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


2017.08.02 


5 


AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


v 


United  States  District  Court 


for  the 


Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  } 
Floor,  New  York,  New  York  10112,  and  any  closed  ' 
containers/items  contained  therein,  See  Attachment  B  ' 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  101 12,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  B 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize 'the  person  or 
property.  ..y*»  \MA  ,  A  A  >/  .  A 

■  ;  .  i  '  ,  1  ,  i  ,  ! 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  ^  ,  1  y /;  ■/ _ 

Ay  (hot  to  exceed  14  days)  \ 

in  the  daytime  6:00  a.m,  to  10  p.m.  □  at  any  time  in  the  day  or  night  a&  I  find:  reasonable  cause  has  been 

established.  yyAb  v/A'  'fy-'  u  s  A* 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken.  '  > , ,  b  V;  y  jv.  Y, y f 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  ttiust  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 


Date  and  time  issued:  Lj  "E*  $ 

7 rry 

City  and  state:  New  York.  NY _ 


Printed  name  wc{  title 


■  > 

'  '  i 
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Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  30  Rockefeller  Plaza,  New  York,  New  York  10112,  inside  of  the  offices  of  the  law  film 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

II.  Items  to  Be  Seized  _ _  _ _ _ 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
confributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  puipose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g^Evidencerelatinetoaereen^ts,  loans,  and/or  financial  transactions  between 
Cohen  and  and/or  entities  controlled  by 
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1, 2012  to  the  present. 


md  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and / or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election, 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

©  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

©  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

©  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subj  ect  matter  of  the  investigation;  and 

«  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
ff.A  and  1I.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  } 

Floor,  New  York,  New  York  10112,  and  any  closed  ' 
containers/items  contained  therein,  See  Attachment  B  ' 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )\ 

Michael  Cohen’s  Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  York,  New  York  10112,  and  any  closed 
containers/items  contained  therein,  See  Attachment  B 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)’. 

See  Attachment  B 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

TJSMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  □  for  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 

Date  and  time  issued:  Tflffybp  [$(_  L  _ 

*  5  j  Judge ’s  signature 


i 


City  and  state:  New  York.  NY 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 


ATTACHMENT  B 


I.  Premises  to  be  Searched — Subject  Premises-2 

The  premises  to  be  searched  (“Subject  Premises-2”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

An  office  belonging  to  or  assigned  to  Michael  Cohen  located  on  the  23rd  floor  of  the 
building  at  3  0  Rockefeller  Plaza,  New  Y  ork.  New  Y  ork  10112,  inside  of  the  offices  of  the  law  firm 
Squire  Patton  Boggs.  The  building  located  at  30  Rockefeller  Plaza  is  a  66-floor  office  building 
that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller  Plaza. 

n.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-2  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


ind/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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1,  2012  to  the  present. 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-2  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  any  desktop  and 
laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone  belonging  to  Michael  Cohen 
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or  in  his  possession,  portable  hard  drives,  disk  drives,  thumb  drives,  and  personal  digital  assistants. 
In  lieu  of  seizing  any  such  computer  devices  or  storage  media,  this  warrant  also  authorizes  the 
copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-2  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  D 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Safe  Deposit  Box  ocated  at  the  TD  Bank  Branch  at 
500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein,  See  Att.  C 

SEARCH  AND 


To;  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  orrjgvcvihe  the  property  to  be  searched  and  give  its  location)'. 

Safe  Deposit  Bo>  seated  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property, 

c  S  ,  \  \  **^1 ')  i  ^  1  )  $ 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  .  w  IT  \  i '  6 


>  ’  \  >  (not  to  exceed  14  days) 

fif  in  the  daytime  6:00  a.m.  to  10  pan.  O  at  any  time  in  the  day  or  night  as  I  fljid  reasonably  cause  has  been 

established,  ■■ ,/  " .  j ■ 1  ,  '  ’ ••  ’•  s  ' • 

!  '  "  [V  .  ,  <  , 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  ov  leave  the  copy  add  receipt  at  the 
place  where  the  property  was  taken.  \  1  !■  \  ,  V.,  •  ■ f  / 

The  officer  executing  this  wairant,  or  an  officer  present  during  the  execution  of  the,  warrant,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Cleric  of  feGourt. 

_ Upon  its  return,  this  wairant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court,  _ 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  □for  days  (not  to  exceed  30). 

\  \  \  \  ‘  )  >  i  i 

□until,  die  facts  justifying,  the  later  specific  date  of  _ _ Li_ _ 


Date  and  time  issued:  tj  {£ 

y-rvm 

City  and  state:  New  York.  NY _ 


'1  / 
/ 


.  \ludge ’s  signature . 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 
Printed  name  and  title  ' 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

i 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification  . _ _ _ __ 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer  *s  signature 

Printed  name  and  title 


ATTACHMENT  C 


I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  The  safe  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Lama  Cohen. 

II.  Items  to  Be  Seized 

- A^  Evidence,  Fruits^and  Instrumentalities  of  the  Sub j  ect  Offenses - — — — - 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  horn  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

t 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  II(A)(l)-(8),  above. 

C.  Review  of  ESI 

- — - Following  seizure  of-any  electronic  storage  device^  law  enforcement-personnel  (which  may 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
then  precise  contents; 

e  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

9  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 

11 
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use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  he  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Safe  Deposit  Box  Located  at  the  TD  Bank  Branch  at  } 

500  Park  Avenue,  New  York,  New  York  10019,  and  any  ' 
closed  containers/items  contained  therein,  See  Att.  C  ' 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  c  H  be  the  property  to  be  searched  and  give  its  location)'. 

Safe  Deposit  Box ;  Located  at  the  TD  Bank  Branch  at  500  Park  Avenue,  New  York,  New  York  10019,  and  any 
closed  containers/items  contained  therein, See  Attachment  C 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  C 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


H-U-  fc 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. 

USMJ  Initials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


*  Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed:. 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _ 

Executing  officer ’s  signature 


Printed  name  and  title 


ATTACHMENT  C 


I.  Premises  to  be  Searched — Subject  Premises-3 

The  premises  to  be  searched  (“Subject  Premises-3”)  are  described  as  follows,  and  include 
all  locked  and  closed  containers  found  therein: 

A  safe  deposit  box  located  inside  the  TD  Bank  branch  location  at  500  Park  Avenue,  New 
York,  New  York  10019,  marked  as  box  [he  safe  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. 

n.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses - - 

The  items  to  be  seized  from  Subject  Premises-3  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1.  Evidence  relating  to  Michael  Cohen’s  net  worth,  available  cash  and  cash 
equivalents,  assets,  monthly  and  annual  income,  and  income  sources,  from  January  1, 2013  to  the 
present. 

2.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

3.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

4.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

5.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

6.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

7.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 
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8.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

9.  Any  portable  electronic  storage  device. 

B.  Search  of  Seized  Electronic  Devices 

Probable  cause  exists  to  search  any  seized  electronic  storage  device  for  the  items  set 
forth  in  Section  II(A)(1)~(8),  above. 

C.  Review  of  ESI 

_  hollowing  seizure  of  any  electronic  storage  device,  law  enforcement  personnel  (which  may 

include,  in  addition  to  law  enforcement  officers  and  agents,  attorneys  for  the  government,  attorney 
support  staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside 
technical  experts  under  government  control)  are  authorized  to  review  the  ESI  contained  therein  for 
information  responsive  to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 

Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  if  necessary  to  evaluate  its  contents  and  to 
locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 

11 
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any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 

(Briefly  describe  ihe  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728, 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  D 

SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location ): 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  dosed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized )\ 

See  Attachment  D 


1 8 MAG  2969 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  apd  seize  the  person  or 


property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


/  _  *  (riot  to  exceed  14  days) 

in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  .receipt  at  the 
place  where  the  property  was  taken.  y  ;  f  j  ‘  /  \  ; ; ,  f  \  Ay>  * 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventoiy  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 


USMJ  Initials 


D  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C,  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Offer  _ days  (not  to  exceed  SO).  <  \\\)  }  \  ) 

□until,  the  facts  justifying,  the  later  specific  date  of  1 U  /  y  v  , _ 


Date  and  time  issued:  ~  ft 

?  .rv  i}/p 

City  and  state:  New  York  NY _ _ 


/^Judge’s  signature 


' 

Hon.  Henrv  B.  Pitrrian.  UiS.  Maalatfate!  Judge , 
Printed  nn/ne  <)nd  h\U 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer  fs  signature 


Printed  name  and  title 


ATTACHMENT  D 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1 728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  1 7th  floor  of  the  hotel. 

H.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  anv  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities/including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  md/or  entities  controlled  by 
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,  and  any  payments  by 


Cohen,  from  January 


i,  zuju  to  me  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David"  Pecker;  and/or  Dylan  Howard' about"  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 


lc  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp's  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  puipose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  ILA  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoolc  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 

devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. _ _ 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage-  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

s  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

e  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

®  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

e  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files,, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

'  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ^ 

New  York,  New  York  1 0065,  and  any  closed  ' 

containers/items  contained  therein,  See  Attachment  D  ' 

SEARCH  AND  SEIZURE  WARRANT 

To:  "  ' Any  authorized  law  enforcemeht“offichr 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)”. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)”. 

See  Attachment  D 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  exceed  1 4  days) 

S?f  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued:  A/  Hrr\Cy  &  _ 

V  1  / Judge  *s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 


Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  *s  signature 


Printed  name  and  title 


ATTACHMENT  D 


I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

n.  Items  to  Be  Seized 

7  A.  Evidence,  F ruitsf  and  rnstrumentalitiesTif  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfomn^nferest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  ■ 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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1,  2012  to  the  present. 


and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,._and/or -Dylan  Ho  ward-about-Donald -Trump,  the-Trump  Campaign,  -Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 


n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  puipose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  H.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage-  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
11.A  and  11.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Wairant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  E 


) 

) 

) 

) 

) 

) 


SEARCH  AND  SEIZURE  WARRANT 


To:  ~~  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location): 

An  Apple  iPhone  with  Phone  Number  i  See  Attachment  E 


The  person  01  pioperty  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized): 

See  Attachment  E 

I  find  that  the  affidavits'  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

y  1  i  >  )  I  .  > 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ^  '  ^  $ 

,  ,'<)  )  \  v  ' <{ridt to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  bight  as  1  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  hr;  leave  thd  copy  add  receipt  at  the 
place  where  the  property  was  taken.  \  7  .  j'\V  a'’1'!/ 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  executioh  bf  the  warrant,  must  prepare  an 
inventoiy  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  ;bf  the  Comt 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check the  appropriate  box)  CJfor  _ days  (not to  exceed 30).  , ..  n  u.i  i  /  , 

□until,  the  facts  justifying,  the  latei*  specific  date  of  _ 

Date  and  time  issued:  V 

■ — - — _ _  _ / 

7:  f  V  f/q 

City  and  state.  New  York.  NY — - —  _ Hon.  Henry  B.  Pitinan.  U.S.  Maaistrate  .liirine 

Printed  name  afyd  title 

.  •>  7  '  lb  ,  U  U  ■; 


s  7  Judge  ^/signature 
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Return 

Case  No,: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court 


Date:  _  _ _ 

Executing  officer  *s  signature 


Printed  name  and  title 


ATTACHMENT  E 


L  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device- 1”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-1,  or  hold  Subject  Device-1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1 343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transferauMnterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ind/or  entities  associated  with  him 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  puipose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bant  records,  from  January  1, 
2013  to  the  present 


1,  zuiz  to  tne  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Tramp  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Tramp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal, 

lc.  Evidence  relating  to  Cohen’s  role  in  the  Tramp  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

~|and/or  entities  controlled  by  | 

to  Cohen,  from  January 


and  any  payments  by 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 


An  Apple  IPhone  with  Phone  Number 
See  Attachment  E 


) 

) 

) 

) 

) 

) 


Case  No. 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorizedlaw  enforcement"  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)’. 

An  Apple  iPhone  with  Phone  Number  ,  See  Attachment  E 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  E 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


Si  in  the  daytime  6:00  a.m.  to  10  p.m. 


(not  to  exceed  14  days) 

□  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 
established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ __ 

TJSMJlnitials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  4-fr-fs-  7-fqf 


IjJ  (4r*%  ty  &  (pr4\ru* 

f  Judge ’s  signature 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No. :  Date  and  time  warrant  executed:  Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


_ Certification _ 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 


to  the  Court. 


Date: 


Executing  officer's  signature 


Printed  name  and  title 


ATTACHMENT  E 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-1 

The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-1”)  is 
described  as  follows: 

An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-1,  or  hold  Subject  Device-1  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device- 1  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  md/or  entities  associated  with  him. 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  transaction^betweai 

~|md/or  entities  controlled  by  | 

I  to  Cohen,  from  January 


,  and  any  payments  by 


1,  2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device- 1  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device- 1  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device- 1,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

An  Apple  IPhone  with  Phone  Number 
See  Attachment  F 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  its  location)'. 

An  Apple  iPhone  with  Phone  Number  See  Attachment  F 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

■  } <s  1  ‘  *  *  '* } }  j 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  a,ud\  sei ze  the  person  or 
property.  •  uVu  \;Y  >  ,<  ,"";1  /’ 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  4^  ~  ^  ;  \ 

■  (not  ip  exceed  14  ctqys) 

in  the  daytime  6:00  a.m,  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  fincj  reasonable  cause  has  been 

established.  \ 1 '  \  ’/-V . '  \  /'  "/  ’ , ,  ' 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  fof  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

_ Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30), 

□until,  the  facts  justifying,  the  later  specific  date  of  \  U  Cy,7  'J_  , _ . 

Date  and  time  issued:  f~/$  _ 6 

City  and  state:  New  York.  NY _  _ Hon.  Henrv  B.  Pitman.  US.  Magistrate  Judge 

Printed  name  and  tide 


Judge  'signature 


ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  —  Subject  Device-2 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


n.  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  1 8  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  ^^^^Jind/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  puipose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 


Cohen  and 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

and/or  entities  controlled  by 

to  Cohen,  from  January 


and  any  payments  by 


1,  2012  to  the  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

- . - - - 1 - — - - - - — - - - - - ‘ - f 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Tmmp  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Tmmp,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tmmp  Campaign. 

l.  Evidence  of  communications  with  Donald  Tramp  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  puipose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  fiom  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 
In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

An  Apple  iPhone  with  Phone  Number 
See  Attachment  F 

SEARCH  AND  SEIZURE  WARRANT 

To:  AnyTuthorizectlaw  enforcemenTofficer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  its  location )\ 

An  Apple  iPhone  with  Phone  Number  See  Attachment  F 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  F 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ 

(not  to  exceed  14  days) 

?f  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Of  dr  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ . 

Date  and  time  issued:  _ f^j  [  B-  PM  \ff±v± _ 

v  *  f  Judge  *s  signature 


City  and  state:  New  York.  NY 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 


AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer's  signature 


Printed  name  and  title 


ATTACHMENT  F 


I.  Device  Subject  to  Search  and  Seizure  -  Subject  Device-2 


The  device  that  is  the  subject  of  this  search  and  seizure  warrant  (“Subject  Device-2”)  is 
described  as  follows: 


An  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 


During  the  execution  of  this  search  warrant,  law  enforcement  personnel  are  authorized  to 
depress  the  fingerprints  and/or  thumbprints  of  Michael  Cohen  onto  the  Touch  ID  sensor  of  Subject 
Device-2,  or  hold  Subject  Device-2  in  front  of  Cohen’s  face  to  activate  the  Face  ID  sensor,  in  order 
to  gain  access  to  the  contents  of  any  such  device  as  authorized  by  this  warrant. 


II,  Review  of  ESI  on  the  Subject  Device 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  and  outside  technical  experts  under  government  control)  are  authorized  to 
review  the  ESI  contained  on  Subject  Device-2  for  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other  Subject  Offenses),  1005  (false 
bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank 
fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offenses”)  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  or 
communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential 
Consultants  or  the  nature  of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with 
Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
or  communications  that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D. 
Cohen  &  Associates,  or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D. 
Cohen  &  Associates. 
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f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 


Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 


Cohen  anc 


and/or  entities  controlled  by 


and  any  payments  by  | 


to  Cohen,  from  January 


1,  2U12  to  tlie  present. 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 
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If  the  Government  determines  that  Subject  Device-2  is  no  longer  necessary  to  retrieve  and 
preserve  the  data  on  the  device,  and  that  Subject  Device-2  is  not  subject  to  seizure  pursuant  to 
Federal  Rule  of  Criminal  Procedure  41(c),  the  Government  will  return  Subject  Device-2,  upon 
request. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant 
to  established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room 
1628 


18MAG 


Case  No. 


2968 


APPLICATION  FOR  A  SEARCH  AND  SEIZURE  WARRANT 

penal^P»^^ 

property  to  be  searched  and  give  its  location). 

Loews  Regency  Hotel,  540  Paris  Avenue,  Room  1628,  a  Suite  that  Encompasses  Rooms  1628, 1629,  and  1630  New  Yolk,  New  York  100 

. . . . —southern _ Disttiotof  New  York _ _ _ Jjjere  is  now  concealed  (Identify  fc 

person  or  describe  the  property  to  be  seized)'. 

See  Attached  Affidavit  and  its  Attachment  A 


The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 

[Evidence  of  a  crime; 

fUcontraband,  fruits  of  crime,  or  other  items  illegally  possessed; 
g^property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime, 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 

Code  Section®  Offense  Description® 

18  use  371, 1005, 1014, 1343,  Conspiracy,  false  bank  entries,  false  statements  to  a  financial 
1344;  52  use  30116  and  30109  institution,  wire  fraud,  bank  fraud,  and  illegal  campaign  contributions 

The  application  is  based  on  these  facts: 

See  Attached  Affidavit  and  its  Attachment  A 


gf  Continued  on  the  attached  sheet. 

□  Delayed  notice  of  30  _  days  (give  exact  ending  date  if  more  than  3  0  days: 


under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 


Date 


City  and  state:  New  York,  NY 


jjjmOfCybU 

Printed  r 


Judge’s  signature  , 

,  PtVnMvrv  ,  , 

name  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


Special  Agent.  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 
as  Exhibit  A. 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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3 .  On  or  about  April  9, 20 1 8,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  4 1  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains  evidence,  fruits,  and  instrumentalities  ofviolations  of  l8  U.S.C.  §§ -1005  (false  bank 
entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  1  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 

Sworn  to  before  me  on  j?y  j  ^ 

9th  day  of  April,  2018 


UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

EL  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 
entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 

rnd/or  entities  associated  with  him. 


liabilities,  to  others,  including  to 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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and  any  payments  by  to  Cohen,  from  January 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign.  ~  ~  — — 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3 .  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 


C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

e  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

«  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

9  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

®  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 

New 


as  (1)  502  Park  Avenue, 

York,  New  York  10022,  (2)  Michael  Cohen’s 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New 
York,  New  York  10112,  (3)  Safe  Deposit  Box  # 
Located  at  the  TD  Bank  Branch  at  500  Park 
Avenue,  New  York,  New  York  10019,  and  (4) 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  • 
Closed  Containers/Items  Contained  Therein,  and  : 
the  Electronic  Devices  Known  and  Described  as  i 
fi  t  an  Apple  iPhone  -with  -  Phone  Number 

ind  (2)  an  Apple  iPhone  with  Phone  : 


Number . 

Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  “Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 
of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  arc  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 


otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3.  Subject  Premises-1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 


4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  located  inside  the  building  at  502 

Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Park  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the  loor  of  the  building. 

Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.1  Additionally,  as  described  below,  Subject  Premises-1  is 
Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10112.  The  building  located  at  30  Rockefeller  Plaza 


1  As  noted  infra,  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Preraises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 
Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  5  00  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box  The  safety  deposit  box  is  in  the  name  of  Michael 

Cohen  and  Laura  Cohen. - - — - — - - — — — - - - 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 
Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  on  my 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  I  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 201 8.2  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 
room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present.3 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 

Premises-4. 

4.  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices  )  aie 
particularly  described  as: 

a.  Subject  Device-1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

"Devfce^l'iS'subscribed  to  Mchaeieohen— Based^orfmy-review-of  cellphone  location  in  formation 
maintained  by  AT&T,  I  have  learned  that  Subject  Device- 1  is  presently  located  in  the  Southern 
District  of  New  Y  ork. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 
Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 

Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 
District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consulting  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allow  them  to,  among  other 
things:  make  and  receive  telephone  calls j  save  and  store  contact  information,  send  and  leceive 


3  Based  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devices  are  one  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that  Cohen  received 
a  price  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversations  with  FBI  agents  conducting  surveillance,  1  understand  that  Room  1728  appeal's  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  financial 
institution),  1343  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud  Offenses”)* 
52  ' U .S.C.  - §  § A3 0 IT 6(a)(1)(A)  and  -30109(d)(4-)(A)(l)  -(illegal  campaign--contributions)-(the- 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other 
Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney’s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beiyl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

emails  in  the  account  ggmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 

between  January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

glgmail.com  (the 


for  content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13,  2017  (the  “Second  Cohen  Gmail  Warrant”). 


d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


(the  “Cohen  MDCPC  Account”)  sent  or 


received  between  the  opening  of  the  Cohen  MDCPC  Account4  and  November  13, 20 1 7  (the  First 


Cohen  MDCPC  Warrant’ 1 ’). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  wairant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.5  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

9.  On  or  about  February  28,  2018,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant” 
and  the  “Second  Cohen  MDCPC  Warrant”).  The  content  produced  pursuant  to  these  warrants  is 
subject  to  an  ongoing  review  for  privilege  by  an  SDNY  filter  team.6 

- 10.  The  emails  search  warrants  described  above- are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11..  On  or  about  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8,  2018,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject 
Device- 1  and  Subject  Device-2. 

BE.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  die  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 

5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,  2018. 

6  On  or  about  February  28, 2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 
an  international  conglomerate  with  real  estate  and  other  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
- in detail  below,  in  these  financial  statementsrand  in  his  oral  and  other  written-statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollar's 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 


acquisition  of  the  taxi  medallions  securing  Cohen’s 


in  connection  with 


debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
(“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-kind  contribution  to 
the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Warrants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt,  (b)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  docurnents  and/or  conduct-meetings  relating  to  his  finances  and  assets,  some  of-which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’ s  consulting  work,  and  his  payment  to  Clifford. 
Specifically,  as  described  below.  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 


2017.08.02 


10 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  19  of  201 

devices,  including  Subject  Device- 1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses7 

The  Bank  Fraud  Scheme 
(i)  Cohen ’s  Statements  to  Sterling  National  Bank 

=, _ _ 16, _ As  set  forth  in  detail  below,  in  2014,  C.ohen,  through  LLCs  controlled  by  him  and, 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and / or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 
Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 
sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 
in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  two  other 


7  In  the  following  recitation  of  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohen.  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  all  sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device-1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  were  made  or 
received  by  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).8  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  irt~  turn"  used  some  of  those  proceeds  to  make  his  monthly  loan  payments-to  Capital 
One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Steiling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  or  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  maiket  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held  by 
Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 


8  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  Ins  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files — was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 
Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8, 2014,  each  of  Cohen’ s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment  due  on 
December  8, 201 6.- Each-loan  was  signed  by-Michael  or  Laura  Cohen,  depending-  on  who  wasthe 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises- 1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subj  ect  Premises- 1 .  In  total,  Sterling  agreed  to  lend  approximately 
$22-  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements,  Sterling  transferred  45  percent  of  Cohen’s 
taxi  medallion  debt  to  Melrose.9 


9  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (  NCUA  ). 

13 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  22  of  201 

e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.10  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
andthenetworthofCohen — whowasthe-direet  obligor  underthe  guarantee agreements=was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 
to  Sterling  and  Melrose.  I  know  from  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  from  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  from  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen — 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 

10  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015 — during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email,  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate[d]  a  strong  ability  to  make  up  the  difference  in  payments.”  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.11  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 
the  loan  maturity  date  to  December  8,  2017. 

h.  I  know  from  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 

11  Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28,  2015,  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence — 
Subject  Premises- 1 — as  collateral,  Cohen  transferred  Subject  Premises- 1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  20 1 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallion  entities  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 


maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  tire  transfer  of  the  medallion  loans— -and  because  Sterling  was  unfamiliar  with 

-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior -to  the  transfer— Cohen  rejected  this  request  initially, But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee-1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  J  Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 

about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount.” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2, 2017,  Sterling  Employee-1  told 

that  Melrose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 
term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 
fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,”  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee-1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  2017  Financial  Statement 
included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and- a  nel  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.12 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  the  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  and 
ttaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


12  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallion 
investments. 
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Sterling,  Melrose,  Cohen,  an  j  Hie  term  sheet  included  a  cover  letter  addressed 

to  Cohen  at  Subject  Premises- 1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 
about  September  5,  2017,  Sterling  Employee- 1  sent  and  Cohen  a  copy  of  the 

executed  term  sheet.  According  to  the  term  sheet  would  borrow  $20,000,000 

from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  was  to  acquire  from 

Cohen. 

m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 

is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying-  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars  because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employ ee-1,  in  Siam  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  and 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises-1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6,  2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30,  2017  (die  “September  2017  Financial  Statement”). 

o.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover-letter  from  Jeffrey  Getzelj-Cohen’s  accountant,  stating,  in  sum  and  substance, _that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.lj  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),14 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  in 
assets  can  be  explained  primarily  by  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets 
and  medallion  investments. 

14  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 

York  taxi  medallions  at  approximately  $180,187.50,  whi^^vj^^^^msideiably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-  term  sheet. 

19 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  28  of  201 

time,  he  indicated  was  held  by  a  trust).15  The  September  2017  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 
and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 

records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements — i.e.,  in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans— By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher  ransaction  was  favorable  for  the  bank 

-  that  is,  that  |  vould  be  a  better  borrower  than  Cohen. 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises- 1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subject  Premises-1.  Cohen  didnotmake  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 

15  Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred  his  residence  to 
a  trust.  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  September  2017. 
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stating  that  during  the  closing  of  the  Cohen-  ransaction,  Cohen  would  “bring  all 

payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24,  201 8,  that  at  the  closing  of  the  Cohen  transaction,  Sterling  provide  a  letter 

stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen  transaction,  however,  did  not  close.  On  or  about  January 

29,  2018,  th<  attorney  emailed  attorneys  for  Sterling  and  stated  that  “at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 

to  go  forward.’- — — - - - - — - — — — ^ - ~~  - — 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  deal  fell  apart. 

Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  January  30, 2018  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-[  transaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  3 1,  201 8,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated -“I  do  NOT  have- more- than  the  $  L250m,”  (Emphasis  in  original,)- 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen’s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 


of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 
Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose16)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at  First  Republic  Bank  (“First  Republic”),  and  then  received  millions  of  dollars  in 
consulting  payments  in  these  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these.  jnnds_duringthe  very, period,  in_which  he  made  disclosures  to  Sterlings 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank 
accounts  by  his  accountant — Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 
ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  Fust  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews  with  a  First  Republic  sales  manager  (“First  Republic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“Fust  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 
following: 


16  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrose  so  that 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen- 
transaction.  Based  on  my  review  of  reports  of  interviews  with  Melrose  employees,  1  also  Know 


that  Cohen  called  employees  at  Melrose  regarding  the  Coher 


ransaction. 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen,17  his  primary  physical  address  is  the  address  for  Subject  Premises- 1. 

b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 
account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 
for  Subject  Premises-!: When  Cohen  opened  th^Essential  Consultants  Account-First  Republic- 
Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form18 — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — which  he  said  was  not  his  main  source  of  income — separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — and  does  not 


17  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

18  First  Republic  Employee-1  fust  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the 
account  has  received  substantial  payments  from  foreign  sources. 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 
FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  sendees.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

_ —  _ i _ Beginning  on- or-about  January- 31,  20 17,  Cohen  began  receiving_monthly 

payments  of  $83,333  into  the  Essential  Consultants  Account  from  an  entity  called  Columbus  Nova 
T.T.C-  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  Nova  LLC. 

ii.  Beginning  on  or  about  April  5,  2017,  the  Essential  Consultants  Account 
began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  phaimaceutical  company  Novartis  International  AG  (“Novartis”). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 
for  a  total  of  $1,099,780. 

iii.  Beginning  in  or  about  April  20 1 7,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 
$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 

2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  ofDefense,  among  other  customers. _ ■■  . . . . . . 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
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Cohen  was  the  only  authorized  signatory  on  the  account.  According  to  account  opening 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premises-1. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above,  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 
never  disclosed  any  of  the  balance  in  the  Essential  Consultants  or  MDC&A  accounts  to  Sterling 


during  the  negotiations-  with-respeet-to-the  | 


ansaction  or  the  subsequent-  loan - 


refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 


Financial  Statement. 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novartis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Trump  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  following: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisoiy  services,  as  requested  by  KAI,  and  that  KAI 


would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  I  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 
for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 
affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Premises- 
2.  In  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Banlc  and  Essential  Consultants  dated  as  ofabout  May  8, 20X7.— The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bade  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 
consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consdting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants] ’s  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1.  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollai-s  ...  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 
including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1,  2017,  Cohen  appears  to  have  entered  into  a  contract  between 
Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  (Essential 
Consultants]  and  Novartis.”  The  contract  provides  for  a  “consulting  fee  of  One  Million  Two 
Hundred-Thousand  ($1,200,000)  US  dollars,”  to  be.  paid. to  Essential  Consultants  _in  equal  monthly, 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  with  Novartis 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 
to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  alliance  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squire 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 
clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
interview  with  Getzel,  and  my  review  of  notes  and  £  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Premises-2.  At  the 
meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice  called  Michael 
D,  Cohen  &  Associates  P.C.,  and  a  consulting-company  called  Essential  Consultants  LLC.  Cohen  , 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  five 
and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30,  2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  In  the  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  [sic\  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  Or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone — which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’ s  email  with  the  answer  “[ljoolcs  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statements— In  a  letter  dated  October  6,  20 17,  addressed-tO-Getzel,  Cohen  stated,  “I  have-reviewed 
the  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  film.  The  attached  is  an  accurate  reflection  of  my  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  in 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and  £j 

21.  Based  on  my  review  of  a  report  of  an  inteiview  with  Sterling  Employee-1, 1  have 
learned  that  Cohen  did  not  disclose  his  income  stream  from  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Sterling  Employee-1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling’s  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  a  principal  paydown  of  Cohen’s  debt. 

Cohen  Understated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
telephone  call  with  Sterling  Employee-3,  and  on  February  1,  2018,  in  an  email  to  Sterling 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
that  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 
equivalents.  Specifically,  from  my  review  of  the  account  schedule  and  bank  l  ecords,  I  have  learned 

the  following:- — — - - - - _ — - - — - — = — — - — — - 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 
2018,  Cohen  had  a  total  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 
As  of  February  1, 2018,  Cohen  had  $1,284,996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689. 1 8  in  an  account  at  Signature  Bank. 
As  of  February  1, 2018,  Cohen  had  $261,517.55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  of  February  1, 2018,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank— Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $4,713,935.08  in  his  accounts 
at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley-: — As-of  February  -1—20-1-8— Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  First  Republic,  and  Morgan 
Stanley.19 

23.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  funds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 
my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 
renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 

19  Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  account  balances  for  TD  Bank  have  not  yet  been  included  in  the  schedule  for  either 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  have  not  yet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appeal's  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 
documents-obtained  pursuant  to  the.  Cohen-Email-Warrants,  and  my  participation  in  aminterview. 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

2012,  Cohen  agreed  to  lend  approximately 

$2,000,000.2°  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  and  amended  the  promissory  note,  and  restructured  the  loan  to 

increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  b;  apartment  in  Sunny  Isles  Beach,  Florida.  On 

or  about  April  8,  2015,  Cohen  ai  restated  the  promissory  note  to  increase  the  principal 

amount  to  $6,000,000.21 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 

20 1  learned  from  Getzel  thai 

21  The  note  states  that  the  loan  is  to  husband  and  wife, 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to  herein. 
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promissory  note,  Cohen’s  loan  to  is  an  interest-only  loan,  and  that  the  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent.  I  also  know  that  the  amended  and 
restated  promissory  note  includes  a  schedule  of  payments  that  requin  to  pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 
requires  tha  repay  the  principal  balance  of  $6,000,000  on  April  28,  2019. 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  the  terms 

of  the  amended  and  restated  promissory  note,  has  made  monthly  payments  of 

approximately  $61,250  since  April  2015.  Specifically,  based  on  my  review  of  records  maintained 
by  Capital  One  Bank,  I  have,  learned  that  from  April2Q15  to -October  2015,  Cohen  received  checks 
from  an  entity  called  totaling  $61,250  per  month,  which  he 

deposited  into  his  personal  bank  account  at  Capital  One  Bank.22  It  appears  from  my  review  of  bank 
records  and  public  sources  tha  is  the  owner  of 

From  my  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 
2015,  Cohen  has  received  checks  from  an  entity  called  totaling 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Bank.  It 
appears  from  my  review  of  bank  records  and  public  sources  that  is  also  the  owner  of  J 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  from 

d.  Based  on  my  review  of  Cohen’s  May  2017  and  September  2017  Financial 
Statements,  my  review  of  his  2015  and  20 16  tax  returns  obtained  via  subpoena  and  from  the  Cohen 
Email  Warrants,  and  my  participation  in  an  interview  with  Getzel,  I  have  learned  that  Cohen  did 


22  In  April  2015,  Cohen  received  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 
equaled  $61,250,  but  iften  made  the  payment  in  multiple  checks. 
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not  disclose  this  interest  income  he  was  receiving  from  :o  Sterling  or  Melrose,  or  list  it 

on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel— his  accountant— about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing  ;axes  in  20 17.23 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 
Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  in  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 


Cohen  Had  a  Side-Agreement  With 


26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 
interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  with^^^j  :  it  appears  thai  igreed  to  pay  an  above-market  price 

for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee-1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 


Employee-1  to  Cohen  and  The  term  sheet  listed  Cohen’s  address  as  the  address  for 

Subject  Premises-1.  According  to  the  term  sheet,  would  borrow  $20,000,000 

from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  vas  to  acquire  from 


23  Accordingly,  this  interest  income — which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  or  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 


describing  the  terms  of  the  Cohen-3 
not  mention  any  payments  from  Cohen  to 


(transaction  and  the  new  loan  to 

including  a  $3.8  million  payment.  Tire 
memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is..recognized  that  this.  is_not_in_  line . with  current  market  .values.”  Indeed. 


according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  agreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 


had  a  side  agreement  witl 


to  pay  I 


sum  of  money  for  entering  into  the 


medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 

as  paying  for  each  medallion 


according  to  Sterling  Employee-3,  the  price  thal 
appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sum  and  substance,  that  he  had  no 
side  agreement — and  never  had  a  side  agreement — with 


27.  While  Cohen  anc 


did  not  disclose  any  payment  from  Cohen  to 


n  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  my  participation  in  an  interview 
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with  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  the  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  then  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000  ”24 

_  b.  According  to  Getzel,- Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtam 

$3,800,000  to  p  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  ol  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  vas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen  made 


24  The  inference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  fonn  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 


TheDirty.com  that-Trump  had  had  an  extramarital-affair-with  Clifford,  an  adult-film-actress  whose 


screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  then-  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1, 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 


regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 
a  sleazy  and  disgusting  website. ...  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit  .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  hi  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following- day^  on- October  8,  201 6, -Trump- appeared  in  a  video  in  which  he  stated,  amongother 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  in  or 
about  October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate ,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  201 6, 1  was  contacted 
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by  counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  20,1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records25  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer?6  Tramp,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text-messages  and  emails,JLbelieve  that.at  least  some  of  these  . communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


25  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

26  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

27 1  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Tramp,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  th irty  secon ds.  ApproximatelyTfour  minutes  later,  Gohen-called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
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believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:31  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan:  Over  to  youtwow-At  l^Ap.m^Davidsonsent  Cohen  a  text  message 
that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.28 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  side  lettei 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 

28  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  Dennison  s  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison  ”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 

October  10,  2016. - -  - - " . T' — - ~ 

35.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  1 3, 20 1 6,  at  8 :54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  First  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretaiy  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m.,  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 
on  the  checks  written  out  of  the  account.  Later  that  day,  another  employee  at  First  Republic 
emailed  Cohen  -account  opening-paperwork- to  complete — Cohen-returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver’s  license  or  passport,  and 
did  not  respond  to  the  employee’s  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 
account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.29  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 

they’re  going  with  DailyMail.  Are  you  aware?”  -One  minutc  later,  Cohen  responded:  Call-me. 


Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmoJdngGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

37.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Teckei-picked  up  againy  apparently- concerning  a  transaction  involving-  Glifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’ s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  Resolution  Consulting  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  Essential  Consultants. 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  so  First  Republic  Employee-2  called  First 
Republic  Employee-1,  a  preferred  banker  at  that  branch,  assist  Cohen.  At  11:00  a.m..  First 

RepubficEmployeertcalled-Gohen— Hmowfrom-my-partiGipation-inan-interview-withFirst 

Republic  Employee-1,  that  around  the  time  ofthe  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  areal  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  tune  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4: 1 5  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’ s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  pan.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At-7i24  pan— Howard  sent  a  text-message  to  Cohen  that:“He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  pan.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — with  the 
funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  tune  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit— to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiff’s  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 
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a.  On  October  28,  2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  veiy  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  pavidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “YouTl  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  hi  2018, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  Peterson 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  Pennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  EC, 
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LLC The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m:,~Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  legal  ding  hei  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howaid 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street- Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don  t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  weie 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  deniesr”  “Howard  responded^-'-Because  there  is  the  payment  fiom 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning.  Pecker 
spoke  to  Trump. 

41.  On  or  about  November  8, 2016,  Trump  won  the  election  for  President  of  the  United 

States.  T  . 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  malting  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
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occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mi'.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (  ...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  I  can  t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Mis.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 

43 .  On  or  about  March  9,2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kind  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated  with  members  of  the~  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses.  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises-1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device-1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  I  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tax  returns,  I  know  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
from  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
routinely  refers  to  Subject  Premises-Tas  His  home.  For  example,  on  or  about  September  28,  20 1 7 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen’s  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  1 8(b),  1 8(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 
1.  See  supra  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 
as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen’s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  owneiship 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 14  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 
Bank. 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Sterling 

addressed  documents  relating  to  the  transaction  and  Cohen  s  attempts  to  modify  the 

terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  see  supra  f  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  T| 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  from  Cohen  to  -were  concealed  from 

Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  18(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises- 1  contains  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  documents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  airy  notes  made  by  Cohen  when  he  was  opening  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  recoids  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises- 1  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions  or  the 
existence  of  funds  in  accounts. 

d.  Based  on  my  review  of  records  maintained  by  Capital  One  Bank,  TD  Bank,  Morgan 
Stanley,  City  National  Bank,  Signature  Bank,  and  Bcthpagc  Credit  Union,  1  know  that  Cohen 
provided  the  address  for  Subject  Premises- 1  as  the  mailing  for  his  accounts  at  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  that  Subject  Premises-1  contains  recoids  lelating  to 
these  accounts,  including,  among  other  things,  bank  statements  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen  s 
ownership  of  the  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  that  were 
not  disclosed  to  Sterling  and  are  not  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  income  since  2015  that  he' has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Financial  Statement,  see  supva,  16(e), 
he  disclosed  $10,000,000  in  “investments  in  overseas  entities.”30  The  value  of  these  investments 
was  omitted  from  subsequent  financial  statements.  However,  for  the  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  the  value  of  those  investments  from  his  2017 

30  Based  on  my  participation  in  an  interview  with  Sterling  Employee-3,  I  have  learned  that 
Cohen  told  Sterling  Employee-3  that  the  reference  to  “investments  in  overseas  entities”  on  his 
2014  Financial  Statement  was  to  serve  merely  as  a  “placeholder”  for  potential  future  investments. 
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financial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-1  is  Cohen’s  primary 
residence  and  he  uses  Subject  Premises-1  as  the  mailing  address  for  bank  records,  there  is  piobable 
cause  to  believe  that  account  statements  for  unknown  bank  accounts  or  assets  concealed  from 

Sterling  are  likely  to  be  found  in  Subject  Premises-1 . 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuant  to  the 
Cohen  Email  Warrants,  I  know  that  the  address  Cohen  provided  to  AT &T  for  Essential  Consultants 
is  the  address  for  Subject  Premises-1.  See  supra  *fl  19(c).  Therefore,  there  is  probable  cause  to 
believe  that  Subject  Premises-1  will  contain  evidence  concerning  the  operation  of  Essential 
Consultants  or  money  that  Cohen  received,'  through  Essential  Consultants,  from  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
arrangement  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  may  contain  records  of  other  consulting  arrangements  that  Cohen,  through  Essential 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
produced  pursuant  to  the  Cohen  Email  Warrants,  I  have  learned  that  Getzel’s  accounting  firm  sent 
documents  to  Subject  Premises-1  and  used  the  address  for  Subject  Premises-1  as  the  address  listed 
on  Cohen’s  personal  and  corporate  tax  returns.  See  supra  f  16(n).  For  instance,  on  or  about 
October  6,  2017,  an  employee  at  Getzel’s  accounting  firm  emailed  Cohen  that  she  had  sent 
Cohen’s  September  2017  Financial  Statement  by  FedEx  to  Cohen’s  attention.  Accordingly, 
Cohen’s  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  my  review  of  bank  records  and  publicly-available  documents,  I  know  that 
Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 
also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peterson  and  EC, 
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LLC,”  the  address  for  Essential  Consultants  is  Subject  Premises-!.  Accordingly,  Subject 
Premises- 1  is  likely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  lecords 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 
iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBookPro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the  iCloud  Warrant,  I  know  that  electronic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  PremisesHtoranong  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises- 1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 
discussed  below  are  likely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 
understand  that  Subject  Premises- 1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately  two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  “Pack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room”  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction  -  to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 

62 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  71  of  201 

all  documents  or  evidence  responsive  to  the  warrant  out  of  Subject  Premises- 1,  because  it  does  not 
appear  that  work  is  being  done  to  the  portion  of  Subject  Premises- 1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found.31 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  know  that  Cohen  has  an 
office  at  Subject  Premises-2.  See  supra  fl  18(d),  19(e).  Indeed,  I  have  learned  that  pursuant  to 
Cohen’s  agreement' with  the  law  firm,  he  ha5~“dedicatedand  segregated  office  space  -’-in-Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  T[  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs’s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the  signature  block 

31  As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  travel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive  items,  meaning  that  Cohen  has  likely  taken  some  evidence  from 
Subject  Premises- 1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  nature  of  Cohen  s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premtses-1, 1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 
Premises- 1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  First  Republic  employee,  who  was  participating  in  the  call 
and  taking  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  know  from  an  article  in  Vanity  Fair 
published  on  or  about  February  14,  2018,  that  Cohen  was  interviewed  by  the  magazine  in  Subject 
Premises-2  in  or  about  February  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  Specifically,  from  my  review  of 
emails  producedlpursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  it 'loud  Warrant,  as  we!! 

as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  2018  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  K  16(t),  16(u). 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 
negotiations  with  Sterling. 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  the  address 
for  Subject  Premises-2.  See  supra  Tf  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  that  Essential  Consultants  is  located  at  Subject  Premises- 
2.  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 
other  individuals  or  entities. 

c.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  firm,  and  emails 
produced  pursuant  to  the  Cohen  Email  Warrants,  as  well  as  my  participation  in  an  interview  with 
Getzel,  I  have  learned  that  Getzel  visited  Subject  Premises-2  to  meet  with  Cohen  about  his  taxes. 
See  supra  K  20(a)rAt  that  meeting,  Getzel  discussed  with  Cohen  whether-Gohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 
and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintains 
a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appeal's  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  that  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 
Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business — such  as  contracts  with  clients 
and  records  of  payments — at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Premises-2. 
Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 


will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particular: 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 


2017,  as  Cohen  was  receiving  substantial  income  from  consulting  work — which  he  did  not  disclose 
to  Sterling — Cohen  opened  the  safety  deposit  box  at  TD  Bank,  which  is  Subject  Premises-3.  In 
light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Bank, 
there  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  assets,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 


Sterling.  Indeed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 


Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  In  addition,  based  on  my  review  of  records  produced  by  TD  Bank,  I  know  that 
Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  on  November  10,  2017.  Cohen  signed  into  the  vault  at  approximately  5:35  and 
out  of  vault  at  approximately  5:39  on  that  date.32  Based  on  my  review  of  toll  records,  I  know  that 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box  -  approximately  45  minutes  later  - 
was  to  Keith  Davidson.  Specifically,  at  6:25  p.m.  Cohen  called  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  back  and  they  spoke  for  approximately 


32  The  entry  in  the  bank’s  log  book  does  not  specify  whether  this  is  A.M.  or  P.M.  However,  I  infer 
that  it  is  P.M.,  because  it  is  unlikely  that  the  bank  would  have  been  open  at  5:35  and  5:39  a.m. 
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22  minutes.  The  second  such  occasion  was  on  February  2,  2018,  which  is  during  the  time  period 
numerous  media  reports  about  Cohen’s  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen’s  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timing 
of  Cohen’ s  two  visits  to  the  vault  -  one  shortly  before  a  call  to  Keith  Davidson  and  the  other  ai  ound 
the  time  that  Cohen  came  under  media  scrutiny  in  connection  with  the  payment  to  Davidson  s 
client-  gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  the 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen’s  dealmg  with  Keith 
Davidson  and  the  payment  to  Clifford,  including  documents  or  evidence  that  Cohen  did  not  want 
to  leave  in  his  apartment  where  construction  workers  would  be  present. 

5 1 .  Based  on  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email  Wai  rants  and 
cell  phone  location  information,  I  believe  that  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  See  supra  fl  3(d).  There  is  also  probable  cause  to  believe  that  Subject  Premises-4  contains 
instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following. 

a.  As  described  above,  it  appears  that  Cohen  moved  to  Subject  Premises-4  on  or  about 
February  1,  2018,  at  which  time  numerous  media  reports  about  Cohen’s  involvement  in  the 
payment  to  Clifford  were  being  published.  See  supra  3(d).  During  this  time  same  period, 
Cohen  was  frequently  corresponding  with  the  media  and  sent  himself  and  others  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  42(a)-(c).  Thus,  there  is  probable  cause 
that  Cohen  took  at  least  some  documents  and  evidence  relating  to  the  Clifford  payment  with  him 
to  Subject  Premises-4,  in  order  to  reference  and  consult  them  in  connection  with  these  statements. 

33  As  noted  above.  Subject  Premises-3  is  approximately  five  inches  by  ten  inches.  Accordingly,  I 
do  not  believe  that  it  would  fit  a  large  volume  of  hard  copy  documents;  however,  a  small  number 
of  hard-copy  documents,  or  a  large  volume  of  documents  contained  on  a  flash  drive  or  other 
portable  storage  device,  would  fit  in  Subject  Premises-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 


in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 


For  example,  on  January  30,2018,  Cohen  had  a  lengthy  phone  call  with  Sterling  Employee-3  about 
his  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employee-3  claiming  that  he  did  not  have  more  than  $1.25  million  in  cash.  See  supra  Iff 
1 6(u).  Thus,  there  is  probable  cause  that  Cohen  took  at  least  some  documents  and  evidence  relating 


to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 
consult  them  in  connection  with  these  negotiations. 

-  c.  As  describedTibbve,  Cohen  used  at  least  brie  Apple  iPhone,  an  Apple  iPad  Mini, 


and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  linked  to  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-1  —  Cohens’  permanent  residence  —  to  place 
telephone  calls  and  backup  files  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  at  Subject  Premises-4  is  temporary,  based  on  my  training  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  there  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  contains 


electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products. 


that  for  the  reasons  discussed  herein  are  likely  to  contain  evidence  of  the  Subject  Offenses. 


d.  Moreover,  as  set  forth  above,  based  on  cellphone  location  information  I  know  that 
Subject  Device-1  and  Subject  Device-2  were  in  the  vicinity  of  Subject  Premises-4  as  recently  as 
this  morning  (April  8,  2018).  As  set  forth  above,  there  is  probable  cause  to  believe  that  Cohen 
used  the  Subject  Devices  in  furtherance  of  the  Subject  Offenses,  including  to  communicate  with 
Sterling  employees  regarding  the  medallion  transaction,  with  First  Republic  employees  legarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  payment  to  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subj  ect  Premises-4  at  that  moment,  Subj  ect 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subj  ect  Premises-4  at  that  moment,  the  devices  will  likely  be  on  his  pel  son, 
wherever  he  is  located  (which,  based  on  location  data  for  Subject  Device-1  and  Subject  Device-2 
as  recently  as  today,  is  likely  to  Be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device-1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 
warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBook  Pro,  and  has,  at  various  tunes,  contained  Apple  cellphones;  similarly,  there  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  devices  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  receive 
communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  First  Republic,  Getzel,  the  entities  to  which  he  is  pioviding 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emails  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  from  my  training  and  experience 
that  individuals  can  and  do  delete  emails  from  their  Internet-based  inboxes  but  retain  copies  of 
those  emails  on  their  hard  drives.  1  also  know  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repositoiy  of  all  emails  relevant  to  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
the  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 


Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  Subj ect  Premises- 1 ,  Subj  ect  Premise-2  and  Subj  ect  Premises-4  likely 
contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  that  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  tablets.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  the  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  tme  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

c.  Third,  I  know  from  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants  that  Cohen  sent  up  online  banking  with  First  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banicing  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  theft  financial  transactions  to 
theft  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devices 
contain  evidence  of  banking  activity,  including  the  existence  of  bank  accounts  or  assets  that  Cohen 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Cohen 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust.  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  is 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
messages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

54.  Based  on  my  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  computers  to  communicate  with  co-conspirators,  keep  financial 
ledgers,  and  retain  fraudulent  documents.  As  a  result,  they  often  store  data  on  theft  computers 
related  to  theft  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  chats  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
in  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 
even  years  after  it  occurred.  This  is  typically  true  because: 

o  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no  cost  and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  in  the  future. 

•  Even  when  a  user  does  choose  to  delete  data,  the  data  can  often  be  recoveied  months 
or  years  later  with  the  appropriate  forensic  tools.  When  a  file  is  deleted  on  a  home 
computer,  the  data  contained  in  the  file  does  not  actually  disappear,  but  instead  lemains 
on  the  hard  drive,  in  “slack  space,”  until  it  is  overwritten  by  new  data  that  cannot  be 
stored  elsewhere  on  the  computer.  Similarly,  files  that  have  been  viewed  on  the  Internet 
are  generally  downloaded  into  a  temporary  Internet  directory  or  “cache,”  which  is  only 
overwritten  as  the  “cache”  fills  up  and  is  replaced  with  more  recently  viewed  Internet 

pages.  Thus,  the  ability  to  retrieve  from  a  hard  drive  or  other  electronic  spage  media 

depends  less  on  when  the  file  was  created  or  viewed  than  on  a  particular  user’s 
operating  system,  storage  capacity,  and  computer  habits. 

®  In  the  event  that  a  user  changes  computers,  the  user  will  typically  transfer  files  from 
the  old  computer  to  the  new  computer,  so  as  not  to  lose  data.  In  addition,  users  often 
keep  backups  of  theft  data  on  electronic  storage  media  such  as  thumb  drives,  flash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  the  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  and  Subject  Devices  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of 
the  Subject  Offenses,  as  more  fully  described  in  Sectiop  II  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  the  occupancy  or  ownership  of  the  Subject 
Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 
correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 

72 

2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  81  of  201 


c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tc 


and/or  entities  associated  with  him. 


d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 


with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  puipose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

f.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  und  any  payments  by  ;o  Cohen. 

i.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  then- 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  oi 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications  involving  Michael  Cohen,  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

l.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Tramp  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

- n.  Evidence  relatin^to  any  rehnbursemenlrormther  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj ect  Offenses  under  investigation. 

Ill  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides  that  a  warrant  to  search 

for  and  seize  property  “may  authorize  the  seizure  of  electronic  storage  media  or  the  seizure  or 
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copying  of  electronically  stored  information  ...  for  later  review.”  Consistent  with  Rule  41,  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  foi  a  numbei 
of  reasons: 

o  First,  the  volume  of  data  on  computer  devices  and  storage  media  is  often  impractical 
for  law  enforcement  personnel  to  review  in  its  entirety  at  the  seaich  location. 

®  Second,  because  computer  data  is  particularly  vulnerable  to  inadvertent  or  intentional 
modification  or  destruction,  computer  devices  are  ideally  examined  in  a  controlled 
environment,  such  as  a  law  enforcement  laboratory,  where  trained  personnel,  using 
specialized  software,  can  make  a  forensic  copy  of  the  storage  media  that  can  be 
subsequently  reviewed  in  a  manner  that  does  not  change  the  underlying  data. 

9  Thu  d,  there  are  so  many  types  of  computer  hardware  and  software  in  use  today  that  it 
can  be  impossible  to  bring  to  the  search  site  all  of  the  necessary  technical  manuals  and 
specialized  personnel  and  equipment  potentially  required  to  safely  access  the 
underlying  computer  data. 

•  Fourth,  many  factors  can  complicate  and  prolong  recovery  of  data  fiom  a  computer 
device,  including  the  increasingly  common  use  of  passwords,  encryption,  or  other 
features  or  configurations  designed  to  protect  or  conceal  data  on  the  computer,  which 
often  take  considerable  tune  and  resources  for  forensic  personnel  to  detect  and  resolve. 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen’s  commission  of  the  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs’s  New  York  office.  In  order  to  execute  the 
warrant  in  the  most  reasonable  fashion,  law  enforcement  personnel  will  attempt  to  investigate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  the  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  within  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  that  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  rather  than  physically  seize 
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computers,  to  reduce  the  extent  of  any  disruption  of  Squire  Patton  Boggs’s  operations.  If,  after 
inspecting  the  seized  computers  off-site,  it  is  determined  that  some  or  all  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidence,  the  Government  will  letum  it. 

59.  Additionally,  because  Cohen  is  an  attorney,  and  claims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  collect  evidence 
in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable  privilege.  When 
appropriate,  the  procedures  wilfihclude  useofardesignated^‘filter  team,”  separate  and  apart  from 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  in 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingerprint”)  in  lieu  of  a  numeric  or  alphanumeric 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 
its  users  the  ability  to  unlock  the  device  via  the  use  of  facial  recognition  (through  infrared  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 
called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  that  can  be  used  to  unlock  that  device.  The  user  can  then  use  any  of  the  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  fmger(s)  to  tire  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tiaining 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because  it  is 
considered  to  be  a  more  convenient  way  to  unlock  the  device  than  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device  s  contents. 

63.  In  some  circumstances,  Touch  ID  or  Face  ID  cannot  be  used  to  unlock  a  device  that 
has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  turned  on  oi  lestarted,  (2)  when  moie 
than  48  hours  has  passed  since  the  last  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  not  been  entered  in  the  last  6  days,  and  the  device  has  not  been  unlocked  via  Touch 
ID  in  the  last  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  hours;  (4)  the 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 
via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  that  would  unlock  the  Subject  Devices  aie  not  known 
to  law  enforcement.  Thus,  it  will  likely  be  necessary  to  press  the  fingeis  of  the  user  of  the  Subject 
Devices  to  the  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 
activate  the  Face  ID  sensor,  in  an  attempt  to  unlock  the  devices  for  the  purpose  of  executing  the 
search  authorized  by  this  warrant.  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
with  the  use  of  the  fingerprints  of  the  user,  or  via  Face  ID  by  holding  the  device  in  front  of  the 
user’s  face,  is  necessary  because  the  government  may  not  otherwise  be  able  to  access  the  data 
contained  on  those  devices  for  the  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65.  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 
user  of  the  Subject  Devices,  and  thus  that  his  fingerprints  are  among  those  that  are  able  to  unlock 
the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  unlock  the  Subject  Devices  via  Face  ID. 

66.  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 
unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  foi  a 
user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fingers. 
In  the  event  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  desciibed  above 
within  the  five  attempts  permitted  by  Touch  ID,  this  will  simply  result  in  the  device  lequiiing  the 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67.  I  also  know  from  my  traini  ng  and  experience,  and  my  review  of  publicly  available 
materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  of  the  device  remotely.  By  logging  into  the  Internet,  the 
user  or  any  other  individual  who  possesses  the  user’s  account  information  can  take  steps  to 
completely  wipe  the  contents  of  the  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  only  means  to  prevent  this  action  is  to  disable  the 
device’s  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  either  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  that  is  not  consistently 

available  to  law  enforcement  agents  at  every  arrest. 

68.  Due  to  the  foregoing,  I  request  that  the  Court  authorize  law  enforcement  to  press 
the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  the  Subject  Devices,  or  hold  the 
Subject  Devices  in  front  of  Cohen’s  face,  for  the  purpose  of  attempting  to  unlock  the  Subject 
Devices  via  Touch  ID  or  Face  ID  in  order  to  search  the  contents  as  authorized  by  this  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  the  govermnent,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review  the  ESI  contained  therein  for  information  responsive  to  the  warrant. 

70.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques 
to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses.  Such 
techniques  may  include,  for  example: 

•  surveying  directories  or  folders  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

a  conducting  a  file-by-file  review  by  “opening”  or  reading  the  first  few  “pages”  of  such 
files  in  order  to  determine  their  precise  contents  (analogous  to  performing  a  cursory 
examination  of  each  document  in  a  file  cabinet  to  determine  its  relevance), 

8  “scanning”  storage  areas  to  discover  and  possibly  recover  recently  deleted  data  or 
deliberately  hidden  files;  and 

®  performing  electronic  keyword  searches  through  all  electronic  storage  areas  to 
determine  the  existence  and  location  of  data  potentially  related  to  the  subject  matter  of 
the  investigation34;  and 

8  reviewing  metadata,  system  information,  configuration  files,  legistry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 


34  Keyword  searches  alone  are  typically  inadequate  to  detect  all  relevant  data.  For  one  thing, 
keyword  searches  work  only  for  text  data,  yet  many  types  of  files,  such  as  images  and  videos,  do 
not  store  data  as  searchable  text.  Moreover,  even  as  to  text  data,  there  may  be  information  piopeily 
subject  to  seizure  but  that  is  not  captured  by  a  keyword  search  because  the  information  does  not 
contain  the  keywords  being  searched. 
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71.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 
the  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 
responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  .  If  the  Government  determines  that  the  electronic  devices  are  no  longer  necessary 
to  retrieve  and  preserve  the  data,  and  the  devices  themselves  are  not  subject  to  seizure  pursuant  to 
federal  Rule  of  Criminal  Procedure  41  (c)r  the-Govemment  will  return  these  items,  uponrequest. 
Computer  data  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 
Subject  Offenses. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant  - 


United  States  District  Court 

*  for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No, 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  } 

New  York,  New  York  1 0065,  and  any  closed  ' 

containers/items  contained  therein,  See  Attachment  D  ' 

SEARCH  AND  SEIZURE  WARRANT 

To:  '  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  foi^the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )\ 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  1 0065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 


See  Attachment  D 


I  find  that  the  affidavits),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


(not  to  exceed  14  days) 

fff  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  the  Clerk  of  the  Court. 

Upon  its  return,  this  warrant  and  inventory  should  be  fried  under  seal  by  the  Clerk  of  the  Court. _ 

- -  USMJ Initials 


D  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C,  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Dfor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued: 


ft- 

Judge  *s  signature 


City  and  state:  New  York.  NY _  _ Hon.  Henrv  B.  Pitman,  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure 

Warrant  ^age  A) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 

H.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

_ 'The  items  to  be  seized  from  Subject  Preraises-4  are  evidence-,  fruits,  and  instrumentalities  = 

of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),'  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  Rom  January  1, 2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  trajifeynWntgesUn  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  nd/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D .  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates.  • 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 

20 1 3  to  the  present. 

pjRvjdmicemlatinetoaereMnMts,  loans,  and/or  financial  tmisaction^etween 
Cohen  and  md/or  entities  controlled  by 
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and  any  payments  by  to  Cohen,  from  January 

1, 2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payment's  to  Stephanie  Clifford  or  Karen  McDougal. 

j_  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Tramp,  the  Tramp  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

lc.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Tramp  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Tramp’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’ s  intent  as  it  relates  to  the  Subj  ect  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  fiom  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.  A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  mediae  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concemingthe  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage-  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example. 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looldng  atthe  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  deteimine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

e  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whethei 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  mclude 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges . 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


_of  Investigation,  being  duly  sworn,  . 

deposes  and  says: 

I.  Introduction 
A.,  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 
involving  electronic  evidence. 

2.  On  or  about  April  8,  2018,  the  Honorable  Henry  B.  Pitman,  United  States 
Magistrate  Judge,  issued  a  search  and  seizure  warrant  for  the  premises  known  and  described  as 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein.  The  warrant  and  my  supporting  affidavit  (the 
“Affidavit”)  are  appended  hereto.  The  Affidavit  is  incorporated  herein  by  reference  in  its  entirety 

as  Exhibit  A. 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  of  America  for  a  Search  and  Seizure 
Warrant  for  the  Premises  Known  and  Described 
as  Loews  Regency  Hotel,  540  Park  Avenue, 
Room  1628,  a  Suite  that  Encompasses  Rooms 
1628,  1629,  and  1630  New  York,  New  York 
10065,  and  Any  Closed  Containers/Items 
Contained  Therein 
Reference  No.  20 1 8R00 1 27 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Ee< 
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3 .  On  or  about  April  9,2018,  based  upon  a  conversation  with  another  law  enforcement 
agent  who  spoke  to  an  employee  of  Loews  Regency  Hotel,  I  learned  that  Michael  Cohen  is  in  fact 
staying  in  Room  1628  (in  a  suite  encompassing  rooms  1628, 1629,  and  1630)  (collectively,  “Room 
1628”),  not  Room  1728.  Accordingly,  I  respectfully  submit  the  attached  amended  warrant 
pursuant  to  Rule  4 1  of  the  Federal  Rules  of  Criminal  Procedure  for  the  following  Subject  Premises: 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  New  York,  New  York  10065,  and  Any 
Closed  Containers/Items  Contained  Therein  (“Subject  Premises-4”).  For  the  reasons  detailed  in 
the  Affidavit  and  herein,  I  believe  that  there  is  probable  cause  to  believe  that  Subject  Premises-4 
contains  evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §§  1005  (false  bank 

entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344  (bank  fraud) 
(collectively,  the  “Bank  Fraud  Offenses”),  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371 
(conspiracy  as  it  pertains  to  the  other  Subject  Offenses)  (collectively,  the  “Subject  Offenses”). 

4.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 
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5.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
9th  day  of  April,  2018 


ha 


X  A  \v; 


e. 


hofJ.  henry  b.  Hitman 

UNITED  STATES  MAGISTRATE  JUDGE 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  1 6th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from^Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfe^n^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by  1 
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and  any  payments  by 


to  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

- k.  Evidence  relating  to- Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 

consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  ran  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include:  ’ 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the  identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

®  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

©  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

®  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

©  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United  j 
States  of  America  for  a  Search  and  Seizure  : 
Warrant  for  the  Premises  Known  and  Described 


New 


as  (1)  502  Park  Avenue, I 
York,  New  York  10022,  (2)  Michael  Cohen’s  : 
Office  at  30  Rockefeller  Plaza,  23rd  Floor,  New  i 
York,  New  York  10112,  (3)  Safe  Deposit  Box  #  ; 

Located  at  the  TD  Bank  Branch  at  500  Park  : 
Avenue,  New  York,  New  York  10019,  and  (4)  j 
Loews  Regency  Hotel,  540  Park  Avenue,  Room  : 
1728,  New  York,  New  York  10065,  and  Any  j 
Closed-  Containers/Items  Contained  Therein,  and 


the  Electronic  Devices  Known  and  Described  as 
til  an  Annie  iPhone  with  Phone  Numbej 

and  (2)  an  Apple  iPhone  with  Phone 

Number| 

Reference  No.  2018R00127 


TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  Search  and  Seizure 

Warrant 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 

Special  Agent,  Federal  Bureau  of  Investigation,  being  duly  sworn, 

deposes  and  says: 


I.  Introduction 


A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I  have  been 
a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions,  as  well  as  into  offenses  involving 
public  corruption.  I  also  have  training  and  experience  executing  search  warrants,  including  those 


involving  electronic  evidence, 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  4 1  of  the  Federal 


Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  premises  specified  below  (the  Subject 
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Premises”)  and  the  electronic  devices  specified  below  (the  “Subject  Devices”)  for,  and  to  seize, 
the  items  and  information  described  in  Attachments  A,  B,  C,  D,  E  and  F.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  electronic  devices  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored 
information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of 
establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course 

of  my -investigation.  -Where,„the_,  contents  of  documents  and  the  actions,  statements,  and . 

conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  The  Subject  Premises  and  Subject  Devices 

3,  Subject  Premises- 1,  Subject  Premises-2,  Subject  Premises-3  and  Subject  Premises- 

4  (collectively,  the  “Subject  Premises”)  are  particularly  described  as: 

a.  Subject  Premises-1  is  Apartment  located  inside  the  building  at  502 

Park  Avenue,  New  York,  New  York  10022.  The  building  located  at  502  Parle  Avenue  is  a  32- 
floor  brick  residential  building.  Subject  Premises-1  is  located  on  the  Eloor  of  the  building. 
Based  on  my  review  of  New  York  City  property  records,  I  have  learned  that  Michael  Cohen  and 
Laura  Cohen  own  Subject  Premises-1.1  Additionally,  as  described  below,  Subject  Premises-1  is 

Cohen’s  full-time  residence. 

b.  Subject  Premises-2  is  an  office  located  on  the  23rd  floor  of  the  building  at 
30  Rockefeller  Plaza,  New  York,  New  York  10 1 12.  The  building  located  at  30  Rockefeller  Plaza 

7Z  noted  I  have  learned  that  on  or  about  October  28,  2015,  Cohen  transferred  Subject 
Premises-1  into  a  trust. 
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is  a  66-floor  office  building  that  .spans  the  entire  block  between  Sixth  Avenue  and  Rockefeller 
Plaza.  Subject  Premises-2  is  located  on  the  23rd  floor  of  the  building  inside  of  the  offices  of  the 
law  firm  Squire  Patton  Boggs.  The  office  is  assigned  to  Michael  Cohen.  As  described  below, 

Michael  Cohen  works  and  conducts  meetings  at  Subject  Premises-2. 

c.  Subject  Premises-3  is  a  safety  deposit  box  located  inside  the  TD  Bank 

branch  location  at  500  Park  Avenue,  New  York,  New  York  10019.  Based  on  my  review  of  records 
maintained  by  TD  Bank,  I  have  learned  that  the  safety  deposit  box  is  approximately  five  inches  by 
ten  inches  in  size,  and  is  marked  as  box  #  The  safety  deposit  box  is  in  the  name  of  Michael 
Cohen  and  Laura  Cohen. 

d.  Subject  Premises-4  is  Room  1728  located  inside  the  Loews  Regency  Hotel 
at  540  Park  Avenue,  New  York,  New  York  10065.  The  building  is  a  luxury  hotel  located  on  Park 

Avenue  and  61st  Street.  Subject  Premises-4  is  located  on  the  17th  floor  of  the  hotel.  Based  onmy 
review  of  emails  obtained  pursuant  to  search  warrants  described  below,  1  have  learned  that  on  or 
about  January  5,  2018,  Cohen  received  an  email  from  an  employee  of  Loews  Regency,  which 
included  a  price  quote  for  a  long-term  stay  suite  based  on  a  three-month  stay  from  January  8  to 
April  8, 2018.2  On  or  about  January  29, 2018,  Cohen  sent  an  email  to  a  Loews  Regency  employee, 
stating,  in  pertinent  part:  “I  just  spoke  to  my  wife  and  she  has  scheduled  the  move  for  Thursday. 
Please  mark  down  that  we  will  be  taking  possession  on  Thursday,  February  1st.”  Based  on  my 
review  of  cell  phone  location  data,  I  have  learned  that,  over  the  past  24  hours,  two  cellular  phones 
used  by  Cohen  have  been  located  in  the  vicinity  of  Subject  Premises-4.  In  particular,  on  or  about 


2  Although  the  quoted  price  contemplated  a  three-month  stay  from  January  8  to  April  8,  it  appears 
that  Cohen  did  not  move  in  until  February  1,  and  as  of  today,  April  8,  cellphone  location 
information  demonstrates  that  Cohen’s  cellular  phones  are  in  still  in  the  vicinity  of  Subject 
Premises-4. 
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April  8,  2018,  law  enforcement  agents  using  a  “triggerfish”  device  identified  Room  1728  as  the 

room  within  the  hotel  in  which  the  Subject  Devices  are  most  likely  present.3 

e.  Therefore,  I  believe  that  Cohen  is  temporarily  residing  in  Subject 

Premises-4, 

4.  .  Subject  Device-1  and  Subject  Device-2  (collectively,  the  “Subject  Devices”)  are 

particularly  described  as: 

a.  Subject  Device- 1  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

Based  on  ™y  xeview  of  records  maintained  by  AT&T,  I  have  learned  that  Subject^ 
Device-1  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-1  is  presently  located  in  the  Southern 

District  of  New  York. 

b.  Subject  Device-2  is  an  Apple  iPhone  serviced  by  AT&T  with  the  telephone  number 

Based  on  my  review  of  records  maintained  by  AT&T,  I  have  learned  that  Subject 
Device-2  is  subscribed  to  Michael  Cohen.  Based  on  my  review  of  cellphone  location  information 
maintained  by  AT&T,  I  have  learned  that  Subject  Device-2  is  presently  located  in  the  Southern 

District  of  New  York. 

c.  Based  on  my  training,  experience,  and  research,  and  from  consultmg  the 
manufacturer’s  and  service  providers’  advertisements  and  product  technical  specifications 
available  online,  I  know  that  the  Subject  Devices  have  capabilities  that  allowthem  to,  among  other 
things:  make  and  receive  telephone  calls;  save  and  store  contact  information;  send  and  receive 


Mlased  on  my  conversations  with  these  agents,  I  understand  that  it  is  also  possible  that  the  Subject 
Devic^^eone  floor  below,  in  Room  1628.  However,  as  noted,  I  understand  that 
a  mice  quote  for  a  long-term  stay  suite  and  is  residing  there  with  his  family.  Based  on  my 
conversions  with  FBI  agents  conducting  surveillance,  I  understand  that  Room  1728  appears  to 
be  a  suite,  whereas  Room  1628  appears  to  be  a  standard  room. 
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emails  and  text  messages;  download  and  run  mobile  telephone  applications,  including  encrypted 
call  and  messaging  application  such  as  WhatsApp,  Signal,  and  Dust;  take,  send,  and  receive 
pictures  and  videos;  save  and  store  notes  and  passwords;  and  store  documents. 

C.  The  Subject  Offenses 

5.  For  the  reasons  detailed  below,  I  believe  that  there  is  probable  cause  to  believe  that 
the  Subject  Premises  and  Subject  Devices  contain  evidence,  fruits,  and  instrumentalities  of 
violations  of  18  U.S.C.  §§  1005  (false  bank  entries),  1014  (false  statements  to  a  financial 
institufinnX  1444  (wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Bank  Fraud 
52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the 
“Campaign  Finance  Offenses”),  and  18  U.S.C.  §§  371  (conspiracy  as  it  pertains  to  the  other- 
Subject  Offenses)  (collectively,  the  “Subject  Offenses  ). 

D.  Prior  Applications 

6.  The  FBI  and  the  United  States  Attorney 5  s  Office  for  the  Southern  District  of  New 
York  (“USAO”)  have  been  investigating  several  courses  of  criminal  conduct  by  Michael  Cohen. 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  die  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  other  holdings. 

7.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a. 


emails  in  the  account  I 


On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
bgmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 


between  January  1, 2016  and  July  18, 2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  ^gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  inthe  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 

November  13, 2017  (the  “Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  accoun  the  “Cohen  MDCPC  Account”). sent  or 

received  between  the  opening  of  the  Cohen  MDCPC  Account4  andNovember  13, 2017  (the  “First 
Cohen  MDCPC  Warrant”). 

8.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  20 1 8,  the  SCO  provided  the  USAO 


4  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  kno  w  that  the  warrant  did 
not  pecity  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 

warrant. 
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with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.5  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 

for  privilege. 

9.  On  or  about  February  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC  Account,  among  other  accounts,  sent 
or  received  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen  Gmail  Warrant 
and  the  “Second  Cohen  MDCPC  Warrant”).  The  content  produced  pursuant  to  these  warrants  is 

subject  to  an  ongoing  review  for  privilege  by  an  SONY  filter  team.5 - - 

10.  The  emails  search  warrants  described  above  are  referred  to  collectively  as  the 

“Cohen  Email  Warrants.” 

11.  On  or  about  April  7,  20 1 8,  the  USAO  and  FBI  sought  and  obtained  a  warrant  for 
prospective  and  historical  cellphone  location  information  for  Subject  Device-1  and  Subject 
Device-2.  On  or  about  April  8, 20 1 8,  the  USAO  and  FBI  sought  and  obtained  authority  to  employ 
an  electronic  technique,  commonly  known  as  a  “triggerfish,”  to  determine  the  location  of  Subject. 
Device-1  and  Subject  Device-2. 

II.  Probable  Cause 
A.  Overview 

12.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI 
are  investigating,  among  other  things,  schemes  by  Target  Subject  Michael  Cohen  (a)  to  defraud 
multiple  banks  from  in  or  about  2016  up  to  and  including  the  present,  and  (b)  to  make  an  illegal 


5  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 

2,2018. 

5  On  or  about  February  28,  2018  and  April  7, 201 8,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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campaign  contribution  in  October  2016  to  then-presidential  candidate  Donald  Trump.  As  noted, 
Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald 
Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization, 

an  international  conglomerate  with  real  estate  and  othei  holdings. 

13.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations 
in  and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  misrepresented  his  ability  to  pay  cash  by  failing  to 
disclose  cash  he  began  receiving  in  2017  from  new  consulting  work;  (ii)  significantly  understated 
his  total  holdings  of  cash  and  cash  equivalents;  (iii)  failed  to  disclose  tens  of  thousands  of  dollars 
he  received  in  monthly  interest  income,  and  (iv)  failed  to  inform  the  banks  from  which  he  was 
seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8  million  cash  payment  to  a  thud  party, 

in  connection  wit  acquisition  of  the  taxi  medallions  securing  Cohen’s 

debt.  By  making  these  misrepresentations  and  material  omissions,  Cohen  avoided  making 
monthly  payments  on  his  loans,  and  attempted  to  fraudulently  induce  the  banks  to  relieve  him  of 
certain  repayment  obligations  and  personal  guarantees  that  Cohen  and  his  wife  had  signed. 

14.  Additionally,  the  investigation  has  revealed  that  shortly  before  the  2016 
presidential  election,  Cohen  made  a  payment  of  $130,000  from  a  limited  liability  corporation 
'  (“LLC”)  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an  extramarital  affair  with 
then-candidate  Trump.  This  payment  was  made  to  Clifford  in  exchange  for  an  agreement  not  to 
make  any  public  disclosures  about  her  alleged  affair  with  Trump.  As  set  forth  below,  there  is 
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probable  cause  to  believe  that  Cohen  made  this  payment  to  Clifford  for  the  purpose  of  influencing 
the  presidential  election,  and  therefore  that  the  payment  was  an  excessive  in-ldnd  contribution  to 

the  Trump  campaign. 

15.  Based  on  my  review  of  emails  obtained  from  the  Cohen  Email  Wan  ants, 
information  obtained  pursuant  to  the  iCloud  Warrant,  and  documents  produced  pursuant  to 
subpoenas,  as  well  as  my  review  of  public  sources,  I  have  learned  that  Cohen  has  used  the  Subject 
Premises  to  (a)  receive  documents  related  to  the  transaction  intended  to  relieve  Cohen  of  his  taxi 
medallion  debt,  (h)  receive  documents  and/or  conduct  meetings  related  to  his  consulting  work,  (c) 
receive  documents  and/or  conduct  meetings  relating  to  his  finances  and  assets,  some  of  which,  as 
noted  above  and  as  detailed  further  herein,  he  has  concealed  from  the  banks  in  connection  with  the 
refinancing  of  his  taxi  medallion  debt,  (d)  receive  and  send  documents  relating  to  his  payment  to 
Clifford,  and  (e)  house  and  operate  electronic  devices  that  were  utilized  in  connection  with,  among 
other  things,  the  taxi  medallion  transaction,  Cohen’s  consulting  work,  andhis  payment  to  Clifford. 
Specifically,  as  described  below,  Subject  Premises-1  likely  contains  evidence  concerning  Cohen’s 
taxi  medallion  loans,  his  negotiations  with  banks,  his  personal  finances,  his  consulting  work,  his 
tax  returns,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence, 
all  of  which  constitute  or  contain  evidence  of  the  Subject  Offenses.  Additionally,  as  described 
below.  Subject  Premises-2  likely  contains  evidence  relating  to  Cohen’s  consulting  work,  his 
finances,  and  his  payment  to  Clifford,  as  well  as  electronic  devices  containing  such  evidence. 
Subject  Premises-3,  as  described  below,  likely  contains  evidence  relating  to  Cohen’s  assets  and 
finances,  including  assets  that  may  not  have  been  disclosed  to  banks  in  connection  with  the 
refinancing  of  Cohen’s  taxi  medallion  debt  or  documents  relating  to  such  assets,  and  documents 
or  evidence  related  to  Cohen’  s  payment  to  Clifford.  Subject  Premises-4  likely  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which  themselves  contain  evidence  of 
the  Subject  Offenses,  including  concerning  Cohen’s  taxi  medallion  loans,  his  negotiations  with 
banks,  his  personal  finances,  his  consulting  work,  his  tax  returns,  and  his  payment  to  Clifford. 
Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that  the 
Subject  Premises  and  Subject  Devices  will  include  evidence  of  the  Subject  Offenses. 

B.  Probable  Cause  Regarding  Subjects’  Commission  of  the  Subject  Offenses* * * * * * 7 

The  Bank  Fraud  Scheme 

_ __ _ (j)  Cohen ’s  Statements  to  Sterling  National  Bank _ ___ _ 

16.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  LLCs  controlled  by  him  and 

his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling  National  Bank  (“Sterling”)  and 
the  Melrose  Credit  Union  (£tMelrose”),  seemed  by  taxi  medallions,  for  approximately  $20  million. 
Though  entered  into  by  LLCs,  the  loans  were  also  secured  by  personal  guarantees  in  the  names  of 
both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry  weakened  and  the  medallions  lost  value, 
Cohen  sought  to  renegotiate  the  terms  of  those  loans  and/or  relieve  himself  from  their  obligations, 
including  the  personal  guarantees.  As  part  of  that  effort,  Cohen  made  a  series  of  representations 
to  Sterling  and  Melrose  about  his  net  worth,  assets,  available  cash  and  income,  among  other  things. 

Specifically,  based  on  my  review  of  records  maintained  by  Sterling  and  Melrose,  and  public 

sources  concerning  the  taxi  industry  and  the  value  of  taxi  medallions,  as  well  as  my  participation 

in  interviews  with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  two  other 


7Inthefo11owing  recitatkmrf  probable  cause,  I  frequently  refer  to  phone  calls  or  text  messages 
involving  Cohem  The  text  messages  described  herein  as  sent  or  received  by  Cohen  were  aff sent 
or  received  from  the  telephone  numbers  associated  with  Subject  Device- 1  or  Subject  Device-2. 
The  vast  majority  of  the  phone  calls  described  herein  made  or  received  by  Cohen  weie  made  oi 
received  by  the  telephone  numbers  associated  with  SubjectDevice-1  or  Subject  Device-2,  although 
in  certain  limited  instances  Cohen  used  a  landline  or  other  phone. 
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Sterling  employees  (“Sterling  Employee-2”  and  “Sterling  Employee-3”),  I  have  learned,  among, 
other  things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).8  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed-  by 
loans  from  Capital  One  bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  make  his  monthly  loan  payments  to  Capital 

One. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 
the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One.  By  in  oi  about 
September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would  allow 
Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in  value 
of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval  in  the 
taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber— taxi  medallion 
loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value  of  taxi 
medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans— like  the  loans  held  by 
Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1 ,  borrowers  typically  cashed  out  the  increase  m  the  loan  amount 

«One  of  these  companies^  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which 
according  to  letters  from  Capital  One  in  Sterling’s  files— was  greater  than  his  previous  debt  at 
Capital  One  Bank  ($21  million,  ofwhich  $14.6  million  was  a  line  of  credit  to  Cohen).  This  allowed 

Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 

about  December  8, 2014,  each  of  Cohen’s  sixteen  taxi  medallion  LLCs  entered  into  loan  agreements 
and  promissory-  notesJwith-Sterling Jbr  the  principal  sum  of  $,1,375,000,  with  repayment  due  on 
December  8, 2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who  was  the 
sole  shareholder  of  the  LLC.  The  address  listed  for  each  of  the  LLCs  was  the  address  for  Subject 
Premises- 1 .  The  loans  were  also  each  secured  by  a  security  agreement,  dated  the  same  day,  making 
the  medallions  collateral  for  the  notes.-  To  give  Sterling  additional  security,  Michael  and  Laura 
Cohen  signed  personal  guarantees  and  confessions  of  judgment,  giving  Sterling  the  right  to  pursue 
collection  against  the  Cohens’  personal  assets  were  their  corporations  to  default  under  the  loan 
agreements.  The  personal  guaranty  agreements  stated  that  the  LLCs  had  offices  at  the  address  for 
Subject  Premises- 1,  and  contained  a  notice  provision  that  stated  that  any  notices  required  by  the 
agreements  should  be  mailed  to  Subject  Premises- 1.  In  total,  Sterling  agreed  to  lend  approximately 
$22  million  to  the  Cohens’  companies. 

d.  Pursuant  to  participation  agreements,  Sterling  transferred  45  percent  of  Cohen  s 
taxi  medallion  debt  to  Melrose.9 


9  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit'Union  Administration  (“NCUA”). 
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e.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Mehose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.'°  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collaterd  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen-who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

f.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies.  Additionally,  Cohen  began  falling  behind  on  loan  payments 


to  Sterling  and  Melrose.  I  know  fiom  records  maintained  by  Sterling  and  an  interview  with  Sterling 
Employee-2  that,  beginning  in  or  around  September  2015,  Cohen  told  Sterling,  in  sum  and 
substance,  that  the  individual  leasing  Cohen’s  medallions  had  fallen  behind  in  making  payments  to 
Cohen,  and  that  as  a  result,  the  monthly  cash  flow  fiom  his  taxi  medallions  had  been  reduced, 
leaving  him  with  a  shortfall  of  approximately  $16,000  each  month.  For  instance,  I  have  reviewed 
an  email  fiom  Sterling  Employee-2,  dated  September  9,  2015,  summarizing  a  call  with  Cohen— 
which  according  to  the  email  and  toll  records  for  Cohen’s  cellphone  occurred  on  September  8, 


Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  ^ndition  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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2015— during  which  Cohen  told  Sterling  Employee-2,  in  sum  and  substance,  about  his  cash  flow 
problems  and  a  monthly  shortfall  of  approximately  $16,000.  In  that  same  email.  Sterling 
Employee-2  commented  that  despite  Cohen’s  statements,  his  personal  financial  information 
“indicate^  a  strong  ability  to  make  up  the  difference  in  payments."  Cohen,  however,  according 
to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction  in  Cohen’s  monthly  payments. 

g.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 

_ again  omSeptember-28,-2015,.andrthat4^U3dng4he^^cdl  Cohen^at^in^mi  and  substance^hatthe — 

individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  201 5,  Sterling  raised  the  possibility-both  internally  and  with  Cohen-of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.11  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my 
review  of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November 
2015,  as  a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his 
medallions  to  cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  their  loans 
with  Cohen  by,  among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending 

the  loan  maturity  date  to  December  83  2017, 

h.  I  know  from  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee-1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 


11  Based  on  my  review  of  property  records,  I  know  that  on  or  about  October  28, 2015  around 
the  time  period  when  Sterling  raised  the  possibility  of  Cohen  posting  his  personal  residence- 
Subject  Premises-1— as  collateral,  Cohen  transferred  Subject  Premises-1  into  a  trust. 
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assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee-1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  20 1 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallion  entities  to 

for  the  balance  of  the  loans,  which  at  the  time  was  $21 ,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans— and  because  Sterling  was  unfamiliar  with 


-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  31,2017,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 


transfer  deal  with 


Indeed,  in  an  email  sent  by  Cohen  to  Sterling  Employee-2  on  or 
about  February  22,  2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million  from  the  loan 
amount” 


i.  Pursuant  to  the  participation  agreements  between  Sterling  and  Mehose,  Steiling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Mehose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  Sterling  Employee- 1  told 

that  Mehose  had  agreed  to  the  deal  in  principle,  and  that  Sterling  would  be  sending  the  parties  a 

term  sheet  shortly. 

j.  In  order  for  the  banks  to  conduct  diligence  and  evaluate  the  proposed  transaction 


fully,  they  requested  financial  information  from  the  parties.  On  or  about  June  7,  2017,  Sterling 
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Employee-1  emailed  Cohen  to  request  an  “updated  personal  financial  statement,  completed 
jointly  with  Cohen’s  wife,  and  Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June 
8, 2017,  Cohen  emailed  Sterling  Employee- 1  a  Sterling  personal  financial  statement  form  that  had 
been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1,  2017 
(the  “May  2017  Financial  Statement”)  that  was  also  attached.  The  May  20 1 7  Financial  Statement 
included  a  cover  letter  from  Cohen’ s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness-  -  The  May,.  20.17  JEinancfel  Statement  stated  that  Cohen  had  total  assets  of 
$41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The  May  2017 
Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash, 
$26,155,000  in  closely  held  companies  (such,  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence.12 

k.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Steiling 
Employee-1, 1  have  learned  that  Sterling  Employee- 1  reviewed  the  May  2017  Financial  Statement 
with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee-1  asked  Cohen  about 
specific  line  items  on  the  financial  statement,  including  tire  cash  amount,  value  of  medallions,  and 
total  liabilities.  Cohen  stated  to  Sterling  Employee-1,  in  sum  and  substance,  that  the  May  2017 
Financial  Statement  was  accurate. 

l.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  an< 
attaching  a  non-binding  term  sheet  memorializing  the  potential  transaction  between 


12  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  the  precipitous  decline  in 
assets  from  his  2014  financial  statement  to  his  2017  financial  statements  can  be  explained 
primarily  reported  depreciation  in  the  value  of  Cohen’s  real  estate  assets  and  medallton 

investments. 
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Sterling,  Melrose,  Cohen,  anc 


The  term  sheet  included  a  cover  letter  addressed 


to  Cohen  at  Subject  Premises-1.  The  parties  negotiated  the  provisions  of  the  term  sheet  and,  on  or 

about  September  5,  2017,  Sterling  Employee- 1  sent  Cohen  a  °°py  °f  ^ 

executed  term  sheet.  According  to  the  term  sheet^^^Hwould  borrow  $20,000,000 
fi-om  Sterling  and  Melrose,  to  be  seemed  by  the  medallions  that 


vas  to  acquire  from 


Cohen. 

m.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000_paymcnt  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789,  respectively,  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars-because 
Cohen  represented  on  atelephone  call  with  Sterling  Employee-1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  §^^|ransaction,  Cohen  would  no  longei 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

n.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 

because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
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required  and  requested  additional  financial  statements  and  tax  returns  for  Cohen  am 
for  its  credit  underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  September  25, 
2017,  Cohen  emailed  Sterling  Employee-2  a  copy  of  his  2016  tax  return.  The  tax  return  listed 
Cohen’s  mailing  address  as  Subject  Premises- 1 .  Additionally,  on  or  about  October  5, 2017,  Cohen 
re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October 
6, 2017,  Cohen  emailed  Sterling  Employee-2  a  statement  of  financial  condition,  dated  September 
30, 2017  (the  “September  2017  Financial  Statement  ), 

_  O.  Like  the  May  20 L7-Financial  Statement,  the  September  20 17  Financial  Statement 

included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.13  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  m 
closely  held  companies  (including  the  taxi  medallion  entities  and  his  real  estate  holdings),14 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  fust 


13  Based  on  my  review  of  Cohen’s  financial  statements,  I  know  that  this  further  decline  m 
assets  canbe  explabed  primarily  by  reported  depreciation  in  the  value  of  Cohen  s  real  estate  assets 
and  medallion  investments. 

14  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  U'iity-lw0  '4™- 
York  taxi  medallions  at  approximately  $180,187.50.  »Wj|^y|“*r>Wytless  ^ 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen- 
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time,  he  indicated  was  held  by  a  trust).15  The  September  20 1 7  Financial  Statement  included  assets 
and  liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions 

and  some  of  his  real  estate  investment  entities. 

p.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 

'  records  maintained  by  Sterling,  I  have  also  learned  that  around  the  time  Cohen  provided  Sterling 
with  these  financial  statements— i.e.,  in  or  around  September  2017— Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2-,- Cohen  informed  Sterling,  in  sum  and  substaDcc,.thathe  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 
September  201 7  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^saction  was  favorable  for  the  bank 

—  that  is,  that  |  vould  be  a  better  borrower  than  Cohen, 

q.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  The  demand  letter  was  addressed  to  Cohen  at 
Subject  Premises-1.  On  December  29,  2017,  Sterling  sent  Cohen  a  letter  stating  that  he  was  in 
default  under  the  loans  between  Sterling  and  Cohen’s  medallion  corporations.  The  notice  of 
default  was  addressed  to  Cohen  at  Subj ect  Premises- 1 .  Cohen  did  not  make  an  immediate  payment 
on  the  loans,  but  instead  sent  an  e-mail  to  Sterling  Employee-1  on  or  about  January  24,  2018, 


15  Based  on  my  review  of  property  records  maintained  by  the  City  of  New  York,  and  my 
participation  in  an  interview  with  Getzel,  I  know  that  in  2015,  Cohen  transferred 0 
a  trust  He  did  not  disclose  that  transaction  to  Getzel  or  Sterling  until  in  or  about  Septembei  2017. 
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stating  that  during  the  closing  of  the  Cohei  a'ansaction,  Cohen  would  biing  all 

payments  up  to  date  as  well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  on 
January  24, 2018,  that  at  the  closing  of  the  Cohen-  ransaction,  Sterling  provide  a  letter 

stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal  guarantees  of  the 
medallion  loans  had  been  terminated. 

r.  The  Cohen-  ransaction,  however,  did  not  close.  On  or  about  January 

29,  20 1 8,  the  attorney  emailed  attorneys  for  Sterling  and  stated  that  at  this  time 

there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have  changed  and  we  are  not  prepared 
to  go  forward.” 

s.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  leal  fell  apart. 

Sterling  assigned  Cohen’s  loans  to  Sterling  Employee-3,  who  specializes  in  collecting  on 
defaulting  loans.  From  my  participation  in  an  interview  with  Sterling  Employee-3,  my  review  of 
telephone  call  notes  taken  by  Sterling  Employee-3,  and  my  review  of  telephone  records,  I  know 
that  Sterling  Employee-3  spoke  several  times  to  Cohen  on  or  about  J anuary  3  0, 20 1 8  about  paying 
down  and/or  restructuring  Cohen’s  outstanding  taxi  medallion  loans.  On  the  calls,  which  in  total 
lasted  more  than  an  hour,  Cohen  stated  in  sum  and  substance  that  he  did  not  have  more  than 
$1,250,000  to  pay  toward  the  medallion  loans.  On  the  call,  in  the  course  of  reviewing  the  failed 
Cohen-jT  transaction,  Sterling  Employee-3  questioned  Cohen  about  the  price 

|  was  to  have  paid  for  each  medallion,  and  whether  there  was  a  side  agreement  between. 
Cohen  and  Cohen  denied  that  there  was  any  side  agreement  with 

t.  On  or  about  January  31,2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
paying  $500,000  to  bring  the  loans  current  and  $750,000  to  bring  the  principal  balance  to 
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$20,500,000.  Cohen  also  suggested  revised  monthly  interest  payment  amounts.  The  signature 
block  on  the  email  indicated  that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  On  or 
about  January  31,  2018,  Sterling  Employee-3  responded  to  Cohen  and  stated,  in  sum  and 
substance,  that  Cohen  would  need  to  pay  the  entirety  of  the  overdue  payments  and  pay  down  the 
principal  balance  of  the  loan  to  $20,000,000  (in  total,  a  payment  of  approximately  $1,750,000), 
and  would  need  to  make  larger  monthly  interest  payments. 

u.  On  or  about  February  1,  2018,  Cohen  emailed  Sterling  Employee-3  and  proposed 
“[pjayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if  [Sterling]  will  waive 
past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1.250m.”  (Emphasis  in  original.) 
Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial  resources  to  post 
additional  collateral  or  pre-fund  monthly  payments.  The  signature  block  on  the  email  indicated 
that  Cohen’s  address  was  the  address  for  Subject  Premises-2.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-3,  I  have  learned  that  since  January  30,  2018,  Sterling  has 
continued  to  renegotiate  the  medallion  loans  with  Cohen  based  on  Cohen’s  representations  about 
his  current  financial  position.  In  particular,  according  to  Sterling  Employee-3,  Cohen  and  Sterling 
have  an  agreement  in  principal  to  restructure  Cohen’s  loans  based  in  part  of  Cohen  s  agreement  to 
make  a  principal  payment  of  approximately  $750,000,  to  make  a  payment  of  $500,000  to  become 
current  on  interest  payments,  and  to  post  $192,000  in  cash  collateral  for  his  future  monthly 
payments  on  the  loan.  Cohen  also  agreed  to  pledge  an  interest  he  had  in  a  property.  Sterling 
Employee-3  has  stated  that  had  Cohen  indicated  he  had  more  than  $1,250,000  available  to  him. 
Sterling  would  have,  among  other  things,  negotiated  for  a  larger  reduction  to  the  principal  amount 
of  the  loan. 
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(ii)  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Concealed  from  Sterling andMtoC 

17.  As  set  forth  in  detail  below,  despite  multiple  written  and  oral  representations  by 
Cohen  to  Sterling  (and,  by  extension,  Melrose16)  that  he  had  insufficient  funds  to  pay  down  the 
principal  balance  of  the  medallion  loans,  make  monthly  .interest  payments,  or  pay  past-due 
amounts,  it  appears  that  between  2016  and  the  present,  Cohen  opened  and  maintained  bank 
accounts  at  First  Republic  Bank  (“First  Republic”),  and  then  received  millions  of  dollars  in 
consulting  payments  in  these,  accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these 
accounts  and  received  these  funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling 
about  his  personal  finances  (including  his  assets  and  liabilities)  and  his  ability  to  make  payments 
on  the  medallion  loans.  In  these  disclosures  to  Sterling— and  despite  being  asked  about  these  bank 
accounts  by  his  aceountant-Cohen  misled  the  bank  by  claiming  he  had  insufficient  liquidity  to 
satisfy  his  obligations  or  meet  the  bank’s  demands,  while  withholding  information  about  these 

ongoing  revenue  streams  and  liquid  financial  assets  at  First  Republic. 

18.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced 
pursuant  to  a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of 
interviews with  a  First  Republic  sales  manager  (“FirstRepublic  Employee-1”)  and  a  First  Republic 
senior  managing  director  (“First  Republic  Employee-2”),  I  have  learned,  among  other  things,  the 


following: 


16  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen 
K22,  and  other  records  in  Sterling’s  possession  were  forwarded  to  Mebuyogrt- 


have  learned  mat,  pursuant  to  mo  j yai  - .  „  ~  A  A  .  w 

financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Mehj 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen-  L —  - . 

transaction.  Based  on  my  review  of  reports  of  interviews  wg^jelrosjemployees,  I  also  know 

■  -»  j-  ■<  - - -.jr — tickt-i  ransaction. 


transaction.  D^u  -  . 

that  Cohen  called  employees  at  Melrose  regaining  the  Cohen 
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a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 

f 

|_ 

June  2011.  Cohen  controls  several  checking  and  loan  accounts  at  First  Republic,  some  in  his  own 
name  and  others  in  the  names  of  corporate  entities.  According  to  First  Republic’s  know-your- 
customer  records  on  Cohen,17  his  primary  physical  address  is  the  address  for  Subject  Piemises-1 . 

b. .  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 

i  if 

checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential  j 

Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  According  to 

account  opening  documents,  the  primary  address  for  Essential  Consultants  LLC  was  the  address 

-  -  *  | 

for  Subject  Premises-1.  When  Cohen  opened  the  Essential  Consultants  Account,  First  Republic 

I 

Employee- 1  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account— the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form18 — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 

Cohen  also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the 
revenue  from  his  consulting  business — which  he  said  was  not  his  main  source  of  income  separate 
from  his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s  | 

I 

statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  as  described  below,  the  account  was  not  intended  to  receive — and  does  not 


n  Certain  financial  institutions  are  required  to  conduct  such  procedures  puisuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  3 1  U.S.C.  §  53 1 8;  3 1  C.F.R.  §  1020.220. 

18  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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appear  to  have  received-money  in  eonneetion  with  real  estate  nonsuiting  wo*;  in  addition,  the 

account  has  received  substantial  payments  from  foreign  sources, 

c.  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled  by  an 

FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 

following:  —  —  — 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  into  the  Essential  Consultants  Account  front  an  entity  called  Columbus  Nova 
LLC.  According  to  public  sources,  Columbus  Nova  is  an  investment  management  firm  controlled 
by  Renova  Group,  an  industrial  holding  company  based  in  Zurich,  Switzerland  that  is  controlled 
by  Russian  national  Viktor  Vekselberg.  From  January  2017  to  August  2017,  the  Essential 
Consultants  Account  received  seven  payments  totaling  $583,332.98  from  Columbus  NovaLLC. 

ii.  Beginning  on  or  about  April  5,  2017,  ihe  Essential  Consultants  Account 

began  receiving  payments  from  Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house 
financial  subsidiary  of  the  Swiss  pharmaceutical  company  Novartis  International  AG  (  Novaitis  ). 
Between  April  2017  and  February  2018,  the  Essential  Consultants  Account  received  eleven  wire 
'  payments  from  a  Swiss  bank  account  held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980, 

for  a  total  of  $1,099,780, 

iii.  Beginning  in  or  about  April  20 17,  the  Essential  Consultants  Account  stalled 

receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T").  Specifically,  on  or  about  April  14,  2017,  AT&T  sent  $100,000  to  the 
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Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  ten  $50,000  payments  from  AT&T.  In  total,  AT&T  sent 

$600,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9,  2017,  July  10, 2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 

Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
friv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 

vi.  In  total,  from  on  or  about  January  31, 2017  to  on  or  about  February  1, 2018, 
the  Essential  Consultants  Account  received  approximately  $3,033,112.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10, 2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23.  Cohen’s  withdrawals  from  the  Essential  Consultants 
account  reveal  that  it  was  used  for  largely  personal  purposes,  including  to  pay,  among  other  things, 
American  Express  bills  and  fees  from  “the  Core  Club,”  a  private  social  club  in  New  York. 

d.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  MDC&A  Account  ). 
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Cohen  was  the  only  authorized  signatory  on  the  acoount.  According  to  account  openrng 
documents,  the  primary  address  for  MDC&A  Account  was  the  address  for  Subject  Premtses-l. 
Among  other  things,  the  MDC&A  Account  received  ten  wire  transfers  and  one  check  from  an 
account  in  the  name  of  Squire  Patton  Boggs,  a  law  firm.  As  noted  above.  Subject  Premises-2  is 
located  inside  the  New  York  office  of  Squire  Patton  Boggs.  In  total,  from  on  or  about  April  5, 
2017,  to  on  or  about  January  2, 2018,  the  MDC&A  Account  received  $426,097.70  in  deposits,  and 
the  balance  in  the  account  as  of  January  2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen 

~neverdisolosed  any  of-th^balance.in-the.EssentiaLCsnsu!tatitAgLMDC&A  accounts  to  Sterling  _ 

during  the  negotiations  with  respect  to  the  'ansaction  or  the  subsequent  loan 

refinancing  negotiations,  including  in  his  May  2017  Financial  Statement  and  September  2017 

Financial  Statement, 

19.  Based  on  my  review  of  emails  that  were  seized  pursuant  to  the  Cohen  Email 
Warrants,  and  my  review  of  reports  of  interviews  with  employees  of  AT&T  and  Novarfis,  it 
appears  that  the  aforementioned  payments  to  the  Essential  Consultants  Account  and  MDC&A 
Account  were  for  political  consulting  work,  including  consulting  for  international  clients  on  issues 
pending  before  the  Tramp  administration.  Specifically,  from  my  review  of  emails  from  the  Cohen 
Gmail  Account,  the  Cohen  MDCPC  Account,  and  public  sources,  I  have  learned  the  followmg: 

a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  to  an  individual  whom  I  believe 
is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  “Consulting  Agreement”  between  KAI  and 
Essential  Consultants  dated  as  of  about  May  1,  2017.  The  agreement  indicates  that  Essential 
Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that  Essential 
Consultants  would  render  “consulting  and  advisory  services,  as  requested”  by  KAI,  and  that  KAI 
would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Two  Hundred  Thousand 
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($1,200,000.00)  US  Dollars,”  disbursed  through  eight  $150,000  installments  between  May  2017 
and  December  2017.  1  have  also  reviewed  invoices  in  amounts  of  $150,000  that  Cohen  emailed 
to  an  individual  whom  I  believe  is  affiliated  with  KAI.  At  the  top  of  the  invoices  the  address  listed 

for  Essential  Consultants  is  the  address  for  Subject  Premises-2. 

b.  On  or  about  May  8,  20 17,  Cohen  sent  an  email  to  an  individual  whom  I  believe  is 

affiliated  with  BTA  Bank.  The  signature  block  on  Cohen’s  email  listed  “Essential  Consultants 
LLC”  and  “Michael  D.  Cohen  &  Associates,  PC”  and  provided  the  address  for  Subject  Pi emises 
2.  in  the  email,  Cohen  attached  a  document  purporting  to  be  a  “Consulting  Agreement”  between 
BTA  Bank  and  Essential  Consultants  dated  as  of  about  May  8, 20 17.  The  agreement  indicates  that 
Essential  Consultants  had  the  address  of  Subject  Premises-2.  The  document  indicates  that 
Essential  Consultants  would  render  “consulting  and  advisory  services”  to  BTA  Bank,  and  that 
BTA  Bank  would  pay  Essential  Consultants  “a  consulting  fee  of  One  Million  Eight  Hundred 
Thousand  ($1,800,000.00)  US  Dollars,”  disbursed  through  monthly  payments  of  $150,000.  On  or 
about  May  10, 2017,  Cohen  sent  an  email  to  an  employee  of  BTA  Bank,  and  attached  to  the  email 
an  invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants,  with  the  address  of  Subject  Premises- 
2.  The  invoice  contemplated  a  $150,000  payment  to  Essential  Consultants  for  a  “monthly 

consulting  fee.” 

c.  On  or  about  January  23,  2017,  Cohen  appears  to  have  entered  into  a  consulting 
agreement  with  AT&T,  which  contemplates  that  Essential  Consultants  “shall  render  consulting  and 
advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential  Consultants]  of  those  issues 
and  matters  with  respect  to  which  AT&T  Services  desires  [Essential  Consultants]^  assistance  and 
advice.”  The  agreement  indicates  that  Essential  Consultants  had  the  address  of  Subject  Premises- 
1 .  The  contract  calls  for  AT&T  “to  pay  tire  Consultant  for  his  services  ...  a  consulting  fee  of  Fifty 
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Thousand  ($50,000)  Dollars  . , .  per  month.”  Based  on  my  review  of  reports  of  interviews  with 
AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen  to  consult  on  political  issues, 

including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner,  and  tax  reform. 

d.  On  or  about  March  1, 20 17,  Cohen  appears  to  have  entered  into  a  contract  between 

Novartis  and  Essential  Consultants,  which  provides  that  Essential  Consultants  will  “provide 
consulting  and  advisory  services  to  Novartis  on  matters  that  relate  to  the  repeal  and  replacement  of 
the  Affordable  Care  Act  in  the  US  and  any  other  issues  mutually  agreeable  to  [Essential 

-eonsultants]-and-Novartisdi— The-oontract-provides  for  a  “consulting  fee  of  OneMUonTw^ 

Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to  Essential  Consultants  in  equal  monthly 
installments  over  the  course  of  a  year.  Based  on  my  review  of  reports  of  interviews  withNovartts 
employees,  I  have  learned  that  Novartis  retained  Cohen  to  provide  political  consulting  services  and 

to  gain  access  to  relevant  policymakers  in  the  Trump  Administration. 

e.  In  or  about  February  2017,  Cohen  began  negotiating  the  terms  of  a  “strategic 
alliance”  with  Squire  Patton  Boggs.  On  or  about  March  4,  2017,  Squire  Patton  Boggs  emailed 
Cohen  a  “strategic  allianee  agreement.”  Under  the  terms  of  the  agreement,  Cohen  agreed  to 
generate  business  for  the  law  firm,  and  Squire  Patton  Boggs  agreed  to  pay  to  Cohen  “an  annual 
strategic  alliance  fee  of  $500,000,  payable  in  twelve  (12)  equal  monthly  installments.”  Squire 
Patton  Boggs  also  agreed  to  provide  Cohen  with  “dedicated  and  segregated  office  space  in  [Squure 
Patton  Boggs’s]  New  York  and  Washington  D.C.  offices,  which  office  space  shall  be  physically 
separate  from  [Squire  Patton  Boggs’s]  offices  and  have  locked  doors  and  its  own  locked  file 
cabinets.”  On  or  about  April  3,  2017,  Squire  Patton  Boggs  announced  on  its  website  that  is  had 
fonned  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would  “jointly  represent 

clients.” 
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20.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel  (as  noted  above,  Cohen’s  accountant  at  the  time),  my  participation  in  an 
interview  with  Getzel,  and  my  review  of  notes  and  a  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  Subject  Premises-2.  At  the 
meetingrCohemteld  Getzel>  aunuandaubatance.'that  he  tad  set  up  a  lawpm«^WMichael^ 
D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants  LLC.  Cohen 
told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  *75,000  per  month  in  connection  with 
his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to  be  between  live 

and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6, 20 17,  Getzel  sent  an  email  to  Cohen  in  which  Getzel 
wrote  that  “[a]ttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017”  and  attached  a  draft  of 
the  September  2017  Financial  Statement.  The  draft  statement  reflected  that  as  of  September  30, 
2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately  $33,430,000  (comprised  of 
taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence  and  property),  and  liabilities 
of  approximately  $45,630,000,  leaving  him  purportedly  over  $12  million  in  debt.  Inthe  same  email, 
Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact  that  the  financial  statement  did  not 
list  any  value  associated  with  either  the  Essential  Consultants  Account  or  the  MDC&A  Account: 
“[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  -  Michael  D.  Cohen  &  Associates 
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POC  m  and  Essential  Consultants  LLC.  Please  advise  whether  or  not  these  should  be  disclosed 
and  what  value.” 

c.  On  or  about  October  6. 2017,  Cohen  called  Geteel  by  telephone  -which  is  reflected 
on  toll  records  for  Cohen's  cellphone-^nd  told  Geteel,  in  sum  and  substance,  no.  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value.  On  or  about  October  6,  2017,  following  the  call  with  Geteel,  Cohen,  using  the  Cohen 
Account,  responded  to  GeteePs  email  with  the  answer  “fflooks  good  to  me."  Cohen  never  directed 

"TletKno-malte-aGytelbatigesffo-lus~easltep0sitiQ!rtas-listed-m.Jh&_SeEtembMj2O17^inanciul^ 

Statement.  In  a  letter  dated  October  6, 2017,  addressed  to  Geteel,  Cohen  stated,  1  have  reviewed 
Are  attached  statement  of  financial  condition  and  find  it  to  be  correct  and  consistent  with  the 
representations  that  I  made  to  your  firm.  The  attached  is  an  accurate  reflection  of  toy  assets, 
liabilities  and  net  worth  (deficit)  as  of  September  30,  2017.”  Attached  to  that  letter  was  the 
September  2017  Financial  Statement,  which,  as  noted  above,  was  then  transmitted  to  Sterling  rn 
connection  with  the  proposed  taxi  medallion  transaction  between  Sterling,  Cohen,  and) 

21.  Based  on  my  review  of  a  report  of  an  interview  with  Sterling  Employee-1, 1  have 
learned  drat  Cohen  did  not  disclose  his  income  stream  ton  Essential  Consultants  to  Sterling 
Employee-1  or,  to  his  knowledge,  anyone  else  at  Sterling.  According  to  Staling  Employee  1, 
knowledge  of  such  an  income  stream  would  have  affected  Sterling's  demands  during  the 
negotiations,  particularly  with  respect  to  the  amount  of  aprincipal  paydown  of  Cohen's  debt. 

rnhen  T  Tnde.rstated  His  Available  Cash 

22.  In  addition  to  withholding  the  existence  of  his  Essential  Consultants  income  from 
Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated  his  available  cash  and 
cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my  review  of  the  September 
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20)7  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen  represented  that  he  had 
$1,250,000  in  cash  as  of  September  30,  2017.  I  also  know  that  on  or  about  January  30,  2018,  in  a 
•telephone  call  with  Sterling  Employee-3,  and  on  Februa^  1,  2018,  in  an  email  to  Sterlhrg 
Employee-3,  Cohen  represented  that  he  did  not  have  more  than  $1,250,000  in  cash.  But,  from  my 
review  of  a  summary  of  bank  records  that  were  scheduled  by  forensic  accountants,  I  have  learned 
tot  Cohen  had  approximately  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30, 2017. 
Additionally,  as  of  February  1,  2018,  Cohen  had  approximately  $6,000,000  in  cash  and  cash 

-equivalenlsrSpecifieally,-fr‘om-my'reviewof-the  account  schedule  andbankyecords,  I  have^earned 

the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank.  As  of  February  1, 

2018,  Cohen  hadatotal  of  $1,389,245.78  in  these  accounts. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 

2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

As  ofFebruary  1,2018,  Cohen  had  $1, 284.996.13  in  these  accounts. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689. 1 8  in  an  account  at  Signature  Bank. 

As  of  Fetauaty  1, 2018,  Cohen  had  $261,517,55  in  this  account. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 

Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 

as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic.  As  ofFebruary  1 , 20 18,  Cohen  had  $3,332,992.95  in  these  accounts. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30, 2017. 

f.  As  of  September  30, 20 1 7,  Cohen  had  $1 7,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank— one  in  his  name  and  one  held  jointly  with  his 
wife.  Cohen  also  has  a  safety  deposit  box  at  TD  Bank-Subject  Premises-3.  The  safety  deposit 
box  was  opened  on  December  13,  2017  in  the  names  of  Michael  and  Laura  Cohen. 

h.  In  total,  as  of  September  30, 20 1 7,  Cohen  had  at  least  $4,7 13,93  5 .08  in  his  accounts 
at  Capital  One  Bank,  City  National  Bank,  Signature  Bank,  Sterling  Bank,  Bethpage  Credit  Union, 
First  Republic,  and  Morgan  Stanley.  As  of  February  1,  2018,  Cohen  had  $6,268,732.59  in  his 
accounts  at  Capital  One  Bank,  City  National  Bank,.  Signature  Bank,  First  Republic,  and  Morgan 

Stanley.19 

23.  Accordingly,  based  on  the  foregoing,  it  appeal's  that  Cohen’s  written  and  oral 
representations  to  Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and 
that  Cohen  withheld  information  regarding  approximately  $5  million  in  fimds  from  Sterling  and 
Melrose  in  order  to  secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on 


my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews 
with  Sterling  Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling 
and  Melrose  would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to 


renegotiate  Cohen’s  medallion  loans  and  on  what  terms,  or  to  its  decision  whether  approve  of  the 
transfer  of  those  loans  to 


19  Based  on  my  review  of  the  account  schedules  described  above,  I  know  that,  as  of  the  date  of  this 
affidavit,  the  Account  balances  for  TD  Bank  have  not  yet  been  included m  theschedule  forerther 
date  and  the  account  balances  for  Sterling  National  Bank  and  Bethpage  Credit  Union  havenotyet 
been  included  in  the  schedule  for  February  1,  2018.  Thus,  to  the  extent  that  these  accounts  have 
positive  balances,  Cohen’s  total  balances  in  fact  were  even  higher  on  these  dates. 
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Cohen  Has  Unreported  Interest  Income 

24.  It  appears  that  Cohen  also  hid  from  Sterling  interest  income  that  he  was  receiving  in 
connection  with  a  six  million  dollar  loan  he  made  to  another  individual.  Specifically,  I  know  from 
my  review  of  the  May  2017  Financial  Statement  and  September  2017  Financial  Statement  that 
Cohen  provided  to  Sterling  that  Cohen  did  not  disclose  that  he  had  made  a  note  receivable  in  the 
amount  of  approximately  $6  million,  or  that  he  was  earning  approximately  $60,000  per  month  in 
interest  income  in  connection  with  that  loan.  But,  from  my  review  of  a  summary  of  bank  records 
that  were  reviewed  by  another  law  enforcement  agent,  my  review  of  property  records  and 

documents  obtained  pursuant  to  the  Cohen  Email  Warrants,  and  my  participation  in  an  interview 
with  Getzel,  I  have  learned  the  following: 

a.  Based  on  my  review  of  property  records,  I  have  learned  that  on  or  about  March  12, 

2012,  Cohen  agreed  to  lenc  approximately 

$2,000, OOO.20  It  appears  that  the  promissory  note  was  unsecured  by  any  real  property.  On  or  about 
April  28,  2014,  Cohen  an<  ^^^|amended  the  promissory  note,  and  restructured  the  loan  to 
increase  the  principal  amount  to  approximately  $5,000,000.  Under  the  terms  of  the  amended 
promissory  note,  the  loan  was  secured  ipartment  in  Sunny  Isles  Beach,  Floiida.  On 

or  about  April  8, 20 1 5,  Cohen  and  estated  the  promissory  note  to  increase  the  principal 

amount  to  $6,000,000.21 

b.  Based  on  my  review  of  a  copy  of  the  restated  note,  which  was  obtained  pursuant  to 
the  Cohen  Email  Warrants,  I  have  learned  that  under  the  terms  of  the  amended  and  restated 


20 1  learned  from  Getzel  thall 


21  The  note  states  that  the  loan  is  to| 

jointly  and  severally.  For  ease  of  reference,  I  refer  simply  to 
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promissory  note,  Cohen's  loan  «c  is  an  interns, -only  loan,  and  that  doe  principal  balance 

of  the  loan  bears  interest  at  an  annual  rate  of  12.25  percent  1  also  know  that  the  amended  and 

restated  promissory  note  includes  a  schedule  of  payments  that  require  |>  Pay  Cohen 

approximately  $61,250  per  month  beginning  in  April  2015  and  ending  in  April  2019.  The  note  also 

requires  thal^Mw °«6'000'000  0,1  ^  2°19' 

c.  Based  on  my  review  of  bank  records,  I  have  learned  that,  consistent  with  die  terms 

of  the  amended  and  restated  promissory  note,  ia:!  made  montlily  Paymeot!i  of 

~ appfdxirnately$6T,250eince'ApriT2015v-Specifically,-based  onmyreview  ofrecor’ds  mqmtained 

by  Capital  One  Bank,  I  have  learned  that  from  April  2015  to  October  2015,  Cohen  received  checks 

„  ,  totaling  $61,250  per  month,  which  he 

from  an  entity  called 

deposited  into  his  personal  bank  account  at  Capital  One  Banlc.22  It  appears  flora  my  review  of  bank 
records  and  public  sources  that|^|[s  the  owner  of 

From  ray  review  of  records  maintained  by  Capital  One  Bank,  I  have  also  learned  that  since  October 

,,  ,  1  totaling 

2015,  Cohen  has  received  checks  from  an  entity  ca 

$61,250  per  month,  which  he  deposited  into  his  personal  bank  account  at  Capital  One  Banlc.  It 

appeal’s  from  my  review  of  banlc  records  and  public  sources  that  13  als0  the  ownei 

In  total,  it  appears  that  Cohen  receives  approximately  $735,000  per  year 

in  interest  payments  froir 

d.  Based  on  my  review  of  Cohen's  May  2017  and  September  2017  Financial 
Statements,  my  review  ofhis  2015  and  2016  tax  returns  obtained  via  subpoena  andfrom  the  Cohen 
Email  Wanants,  and  my  participation  in  an  inter-view  with  Getvel,  I  have  learned  that  Cohen  drd 


- -..ra-d  a  pro-rated  payment.  For  all  months  thereafter,  the  total  payment 

equaled  $612250,  but  often  made  the  payment  in  raultrple  checks. 

35 


2017.08.02 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  137  of  201 


not  disclose  this  interest  income  he  was  receiving  fror  |:o  Sterling  or  Melrose,  or  list  it 

on  his  tax  returns.  I  have  also  learned  that  while  this  interest  income  is  taxable,  Cohen  did  not  tell 
Getzel — his  accountant — about  the  income,  and  Getzel  only  learned  about  the  income  because  he 
began  doing^^^  taxes  in  20 17.23 

25.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to 

Sterling  and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen 
withheld  information  relating  to  the  interest  income  he  is  receiving  from  in  order  to 

secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan. 

Cohen  Had  a  Side  Agreement  With 1 

26.  As  set  forth  in  detail  below,  during  the  course  of  Cohen’s  negotiations  to  sell  his 

interest  in  taxi  medallions  and  the  associated  debt  to  Cohen  not  only 

misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  agreement  he 
had  negotiated  with  t  appeal's  tha  igreed  to  pay  an  above-market  price 

for  Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay  approximately 

$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  my  participation  in  interviews  with  Sterling  Employee- 1,  Sterling  Employee-2, 
and  Sterling  Employee-3, 1  have  learned,  among  other  things,  the  following: 

a.  Oh  or  about  September  5, 2017,  an  executed  term  sheet  was  circulated  by  Sterling 
Employee-1  to  Cohen  and  The  term  sheet  listed  Cohen  s  addiess  as  the  addiess  foi 

Subject  Premises- 1 .  According  to  the  term  sheet,  would  borrow  $20,000,000 

tom  Sterling  and  Melrose,  to  be  secured  by  the  medallions  tha  was  to  acquire  from 


23  Accordingly,  this  interest  income— which  should  have  been  reported  as  such  on  Cohen’s  tax 
returns — is  included  herein  in  calculations  of  Cohen’s  true  cash  position. 
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Cohen.  At  a  price  of  *20  million  for  thirty-two  taxi  medallions,  the  proposed  transaction  valued 
each  medallion  as  worth  $625,000.  The  term  sheet  also  contemplated  a  $1,265,913  pay-down  of 
the  principal  balance  of  the  loan.  The  term  sheet  made  no  mention  of  a  $3.8  million  payment  from 
Cohen  to  any  other  form  of  payment  or  financial  transaction  between  the  parties. 

b.  Additionally,  an  Internal  Sterling  credit  memorandum,  date^ctobe^017, 
describing  the  terms  of  the  Cohen-  ransaction  and  the  new  loan  to  d>d 

no,  mention  any  payments  hum  Cohen  to  ncludmg  a  $3.8  million  payment  The 

-lnemdfahdiifcfalso“noted-diattheJ-Toan-amoiint-of-$20MMindicat^A$625M_purchasepripeper 

medallion”  bn,  “it  is  recognized  drat  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  datedFebrnmy  5,  2018,  in  the  month  of  Janua^i 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  Accordingto  Sterling 
Employee-1  and  Sterling  Employee-2,  they  were  never  told  that  lgleed  to  a  Pu,cha 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  w 

any  payment  to 

c.  On  or  about  January  30,  2018,  Sterling  Employee-3  asked  Cohen  whether  Cohen 

.  ,+,  ,  nav  a  sum  of  money  for  entering  into  the 

had  a  side  agreement  with  3  Pdy 

medallion  transaction.  Sterling  Employee-3  asked  Cohen  about  such  an  arrangement  because, 
according  to  Sterling  Employee-3,  toe  price  that  «  paying  for  each  medallion 

appeared  to  be  well  above  the  market  price.  Cohen  stated,  in  sun,  and  substance,  that  he  had  no 

side  agreement— and  never  had  a  side  agreement— 

27.  While  Cohen  and  iid  not  disclose  any  payment  from  Cohen  to 

k  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 

Indeed,  based  on  my  review  of  regards  maintained  by  Geteel,  and  my  participation  in  an  interview 
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Wift  Getzel,  I  have  learned  the  following,  in  substance  and  in  part,  regarding  tire  proposed  side 
payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”^ 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 
in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  then  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 

~ 2febrpbrifidhb2>FtheY3~entities-by-$50Cr,000  and-a-cash-payment.to  the.Bnyer  of  $3,800, 000.”24 - 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 
payment  of  $3,800,000  to  but  Getzel  did  notlmow  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Fmancal 
Statement  that  he  had  $  1 .25  million  in  cash. 

28.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 
withthe  participating  interest  in  dte  loans)  and  reports  of  Interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^Qvas  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  tc 

The  Illegal  Campaign  Contribution  Scheme 

29.  The  USAO  and  FBI  are  also  investigating  a  criminal  violation  of  campaign  finance 
laws  by  Michael  Cohen.  As  set  forth  below,  tee  is  probable  cause  to  believe  that  Cohen  made 


»  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  GetzeL  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  tax,  medalhons. 
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an  excessive  in-kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald 
Trump  in  the  form  of  a  $  1 30,000  payment  to  Stephanie  Clifford,  an  individual  who  was  rumored 
to  have  had  an  extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that 
alleged  affair.  As  set  forth  below,  there  is  probable  cause  to  believe  that  this  payment  was  intended 
to  keep  Clifford  from  making  public  statements  about  the  rumored  affair  on  the  eve  of  the  2016 
presidential  election,  and  thus  constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 

30.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 , 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com ,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  E!  News  that  “[t]he  totally  untrue  and  ridiculous  stoiy  . . .  emanated  Horn 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

31.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4, 2016,  Trump  became  the  presumptive  Republican  Party  nominee 
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for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  revtew 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 

defend  Trump’s  polling  numbers. 

32.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 

teims’’~iB^2005  conversation-with-Billy-Bush,-whorwasThenjfce^oslof^toeg.gi7o//>ri,t;C)0</.  The 

following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
tilings,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don  t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

33.  Based  on  my  review  of  public  sources,  including  an  article;  published  in  S 
magazine  by  a  reporter  who  interviewed  Clifford,  I  have  learned  that  around  this  same  time,  to  or 
about  October  2016,  Clifford  was  to  discussions  with  ABC's  Good  Morning  America  show  and 
Slate  magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement 
about  her  alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author 
based  on  conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to 
be  paid  for  her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized 
in  a  201 8  email  obtained  pursuant  to  the  Cohen  Email  Warrants;  “to  October  2016, 1  was  contacted 
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by  counsel  For  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News ,  were  pursuing  the  20 1 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

34.  From  my  review  of  telephone  toll  records25  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer,26  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content-  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  foi  ovei  foul  minutes. 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 


25  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 

26  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  leports,  apeisonal 
friend  of  Trump.-  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  recoids 
reports  directly  to  Pecker. 

27 1  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hides,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Cohen  had  received  or  made  to  Hicka  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 

in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  pm.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 

HTavidPecker  (asnofed-aboverthePresident  of-ArnericamMedia  lnc,,  orAMI)_andthey_connected  _ 

for  thirty  seconds.  Approxknately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
fiom  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  tecords,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  the,  had  called  each 

other. 

d.  At  7:56  p.m,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  drey  spoke  for  nearly 

eight  minutes. 

e.  At  8:39  pan.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four-  and  six  minutes,  respectively.  At  9:13  pm.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  tom  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
••Keith  will  do  it.  Let's  reconvene  tomorrow”  Based  on  my  involvement  in  this  investigation,  1 
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belLeve  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:3 1  a.m„  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you,”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 

please  call  my  cell,” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m„  Howard  sent  atext  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  yon  both  in  regards  to  that 

-business  opportunCT^-dh^^  ^ 

opportunity.  Thanks.  Dylan.  Over  to  youtwo.”  At  12:25  pm,  Davidson  sen.  Cohen  a  textmessage 

that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion, 

Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  ttre  “olienf  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  horn  Cohen  in  exchange  for  her  axemen,  not  to  discuss  any  prior  affair  with 

then-candidate  Trump.28 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  andDavidson  appearto  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The- purpose  of  the  document. 


2'  As  set  forth  below,  AMI  was  also  involve  m^yment^^oJlKme^^ougA 

However,  because  these  commumoattons  weie  m  c ^  P  agreement  with  Clifford,  and  the 

^tiamdan  a'greementTittlS  sevm".l  months  prior  to  these  communicati  ons  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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.according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.  The  side  lettei  agieement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,  Dennison,  and  theii 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is^  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  oi  his  client  on 

October  10, 2016. 

35,  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  Fiist 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  13, 20 1 6,  at  8:54  a.m,,  Cohen  sent  P ecker  a  text  message 
that  stated:' “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back,”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 


2017.08.02 


44 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  146  of  201 


b.  At  9:23  am.,  Cohen  sent  an  email  that  stated  “call  me”  to  Fiist  Republic  Employee- 
2.  The  email  attached  documents  from  the  Secretary  of  State  of  Delaware  indicating  that  Cohen 
had  formed  a  limited  liability  company  called  “Resolution  Consultants  LLC”  on  September  30, 
2016.  As  noted  above,  “Resolution  Consultants”  is  the  name  of  the  entity  that  Cohen  had  told 
Howard  he  had  formed  recently  after  Howard  said  Davidson  would  “do  it.”  At  10:44  a.m„  Cohen 
called  First  Republic  Employee-2  and  told  him,  in  sum  and  substance,  that  he  needed  an  account 
in  the  name  of  “Resolution  Consultants”  opened  immediately,  and  that  he  did  not  want  an  address 

^oiitiie^cEecEswrittercout’oftthe-account— Eatemthat  day,-another_empioyeejdPiEd^?l!ll!i!!!li- 


emailed  Cohen  account  opening  paperwork  to  complete.  Cohen  returned  the  account  opening 
documents  partially  completed,  but  failed  to  provide  a  copy  of  his  driver's  license  or  passport,  and 
did  not  respond  to  the  employee's  question  of  how  he  wanted  to  fund  the  account.  As  a  result,  the 

account  was  never  opened, 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

36.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford's  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  m,  review  of  toll  records,  information  obtained  pursuant  to  the 

iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Tost,  which  quoted  emails  sent  from 

Cohen’s  email  account  hosted  by  die  Trump  Organization,  on  October  1 7, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  (he  day 
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if  Cohen  did  not  complete  the  transaction  “  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void At  4:00  pan.  that  day,  Cohen  called  Davidson  and  they 

spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  aboutthe  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

— - 1  t  -- .  At  4:43  p.m.,  Howard-sent  Cohen  a  text  message  that  stated.:  “fm  told 

they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affau  with  Trump  to  the  Daily  Mai , 

tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 

Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  die  call  only  lasted  eight 

seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  ‘Well??? 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  Not  taking  my 

call,”  Cohen  responded  one  minute  later:  “You're  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ■agent"'  Based  on  my  involvement  in  this 


29  Due  to  the  partially  covert  nature  of  the  investigation  to 
documents  from  the  Trump  Organization  or  Davidson, 
referenced  in  this  article. 


this  date,  the  USAO  has  not  requested 
and  thus  does  not  possess  the  email 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6 ;49  p  .m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes, 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Tramp  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment. 

37. _ On- or- about  October  25,-2016,  the  cnmmunications  betwegn  Cohen,  Davidson, 

Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  CohenEmail 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’ s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appeal-  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 

minutes.  At  7:11  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 20 1 6,  at  8 :26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump 
Cohen  sent  two  emails  to  the  pemon  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  "can  you  send  me  asap  tile  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  sheet  to  open  the  account,  so  First  Republic  Employee-2  called  First 
Republic Employee- 1 ,  a  preferred  banker  at JhafEranoh,,, assist  Cohen,  At  ll.OOj.m.,  First_ 
Republic  Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee- 1 ,  that  around  the  time  of  the  call  he  went  to  Cohen’ s  office  in  Trump  Towel— 
on  the  same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-youi- 
customer  questions  about  the  purpose  of  the  account-the  answers  to  which  First  Republic 
Employee-1  entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based,  on  my  review  of  records  obtained  ftom  First  Republic,  it  appeal's  that  this  account  (the 
‘‘Essential  Consultants  Account”)  was  created  at  a  time  between  11:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
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Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4: 1 5  pan.  on  October  26, 
2016,  First  Republic  Employee-2's  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  fends  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  pan.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important. 
Cohen  called  Pecker  at  6:49  pan.  and  connected  for  thirty  seconds.  At  6:57  pan.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  a,  7:00  pan. 

andconnectetrf6fahoufthirty~secondS"At-7t06  p,m,a42ohen-called.Pecker.againjndtheyspol^e 

for  nearly  thirteen  minutes.  At  7:24  pan.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  HI  get 
1,  sorted.”  Approximately  an  hour  later,  at  8:23  pan,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  wife  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hmrd-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  offends  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  feat  email,  at  approximately  827  p.m,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I'll  call.”  At  8:28  p.m,  Howard  called  Cohen  and  they  spoke  for  three 

minutes, 

38.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000-with  the 
funds  intended  for  Clifford-for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  feat  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
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toll  records,  bank  records,  and  information  obtained  pnrsuant  to  the  iCloud  Warrant  and  Cohen 

Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 

Bte  wire  received  today,  October  27,  2016  shall  be  held  by  yon  in  your  attorney's  trust  account 

until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 

paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advanee  for 

your-  assistance  and  look  forward  to  healing  from  you  later  ” 

- - h.  A1  approximately  10:01  rum.-according  to  records  provide,!  by  hirst  Republic 

Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Aocount- 
which  had  been  fended  a  day  prior  from  Cohefes  home  equity  line  of  credit-to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 

to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  tom  9:47  a.m„  stating:  “I 

confirm  that  I  will  work  in  good  faith  &  that  no  fends  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx,  Only  after  you  receive  FedEx 

will  I  disburse.  Fan-?” 

d.  At  10:50,  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  tha 

payment  had  been  sent  and  providing  him  with  the  wire  number. 

39.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 

with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 

to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following. 
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a.  On  October  28. 2016,  at  11:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  a,  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howari  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m„  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  A  OK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday  ”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “1 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  pun.,  “Keith  [Davidson]  says 

-”we~artrgoodl”  Cohen~then-responded— OKA'-to-Howard-and-l/Excellent”  to  Dayidsom_  At  __ 

approximately  10:30  p.m,,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  3 1,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “YouTl  have  paperwork  tomonow  says  KD.”  Davidson  said:  ‘  We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 

receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  'Peggy  Peterson,”  pursuant  to  which  “Peterson- 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$  130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson's”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
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LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

40.  On  November  4, 20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Tramp  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
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Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication  -just  days  before  Election 
Day-aboutthe  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 

traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 

with  Howard.  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 

a  text~message~with-a-sereenshot-of-an-email-forwarded_to_hnnby_anpther  Trump  Organisation 

lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
■approximately  7:33  p.m.,  usingtwo  different  cellphones  subscribed  to  him,  Cohen  appears  tohave 

been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  pm.,  Cohen  sent  Howard  a  message,  stating:  “She's  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I'll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  pm.,  Howard  responded  to  Cohen'stext:  “Let's  letthe  dust  settle.  Wedon't 
want  to  push  her  over  the  edge.  She's  on  side  at  present  and  we  have  a  solid  position  and  a  plaus.hle 
position  drat  she  is  rightfully  employed  as  a  columnist”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard's  statement  that  “we  have  ...  a 
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plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m,  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  I  think  it  11  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  "He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  he  s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  fiom 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  horn,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  So  fai  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  bade,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
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statement  by  Storm  denying  everything  and  contradictingthe  other  porn  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  on.  is  taking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 


time.  Based  on  a  text  message  from  Hicks  to 
spoke  to  Tramp. 


Cohen,  I  believe  that  later  that  morning,  Pecker 


the  electionforPresident  of  the  United 


4]  On  or  about  November  8, 2016,  Trump  won 

States 

42.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  fust  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 

sources  Mowing  drat  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warranto,  I 
have  learned  the  following: 

a.  on  or  about  January  23,  2018,  the  da,  after  Common  Cause  filed  its  complaint, 
Cohen  began  emailing  lumself  drafts  of  statements  describing  his  payment  to  Clifford. 
Additional.,,  on  January  23,  2018,  Cohen  emailed  dre  Mowing  draft  of  drat  statement  to  an 

individual  who  appeal's  to  be  writing  a  book  on  Cohen’s  behalf: 

special  counsel  and  piotectoi,  oo  P  .Qn  tQ  be  falsC)  but  I  am. 

mean,  that  it  doesn't  create  harm  and  dam  g  . 
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occur  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford  s 
counsel  and  tendered  the  tends.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  tends  to  cover  the  agreement  I  was  not  reimbuised 
any  monies  from  Mi*.  Trump,  the  Trump  Organization,  any  third  par^  oi 
thePresidential  campaign.  At  no  point  did  I  ever  advise  Mi .  Ti  umpofmy 
communications  or  actions  regarding  this  agreement  As  outlandite 
unusual  as  this  may  appear,  the  Trumps  have  been  like  fam  y 
over  a  decade.  It’s  what  you  do  for  family. 


(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
■  is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (‘...the  2011 
story. but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  m  Octobel2016. 

b.  On  or  about  February  13, 2018,  Cohen  said  in  a  statement  to  The  New  York  Times 


that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  patty  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
.  whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whethei  similal 


payments  had  been  made  to  othei  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016, 1  used  my  own  personal  fends  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Tramp  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 


directly  or  indirectly.” 

43.  On  or  about  March  9, 2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 
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44.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Campaign  Finance  Offenses  by  making  an  in-kind  contribution 
to  Trump  or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  130,000  of  his  “personal  funds”  to  Clifford  and  that  Hie  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford- existed  since  20  l-i  .-In  addition,  the  communication  recordsset  forth  above  make  eviden^ 
that  Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

C.  Probable  Cause  Justifying  Search  of  the  Subject  Premises  and  Subject  Devices 

45.  Based  on  the  foregoing,  my  review  of  records  produced  pursuant  to  subpoenas  and 
the  Cohen  Email  Warrants,  and  the  iCloud  Warrant,  and  my  training  and  experience,  there  is 
probable  cause  to  believe  that  the  Subject  Premises  and  Subject  Devices  have  been  used  in 
furtherance  of  the  Subject  Offenses  and  are  likely  to  contain  instrumentalities,  evidence,  and  fruits 
of  the  Subject  Offenses,  Specifically,  there  is  probable  cause  to  believe  that  Cohen  permanently 
resides  at  Subject  Premises- 1  and,  at  least  in  part,  works  at  both  Subject  Premises-1  and  Subject 
Premises-2,  and  that  those  locations  contain  evidence  relating  to  the  Sterling  taxi  medallion 
transaction,  Cohen’s  assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his 
payment  to  Clifford.  Additionally,  there  is  probable  cause  to  believe  that  Subject  Premises-3 
contains  evidence  of  Cohen’s  assets  and  his  payment  to  Clifford.  Finally,  there  is  probable  cause 
to  believe  that  Subject  Premises-4,  in  which  Cohen  is  temporarily  residing,  contains  electronic 
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devices,  including  Subject  Device- 1  and  Subject  Device-2,  which,  in  turn,  contain  evidence  of  the 
Subject  Offenses,  such  as  evidence  relating  to  the  Sterling  taxi  medallion  transaction,  Cohen’s 
assets,  Cohen’s  consulting  work  for  Essential  Consultants  LLC,  and  his  payment  to  Clifford. 

46.  First,  there  is  probable  cause  to  believe  that  Cohen  lives  and  operates  his  businesses, 
at  least  in  part,  at  Subject  Premises-1.  Specifically,  from  my  review  of  property  records,  1  know 
that  Michael  Cohen  and  Laura  Cohen  own  (in  trust)  Subject  Premises-1.  From  my  review  of 
Cohen’s  tint  returns,  I  know  he  lists  his  primary  residence  as  Subject  Premises-1.  Additionally, 
frornmy  review  of  emails  produced  pursuant  to  the  Cohen  Email  Wiurants,  I  know  that  Coh 
routinely  refers  to  Subject  Premises- 1  as  his  home.  For  example,  on  or  about  September  28, 2017 
and  October  6,  2017,  Cohen  emailed  individuals  that  his  home  address  is  the  address  for  Subject 
Premises-1.  I  also  know  from  my  review  of  emails  that  Cohen  receives  package  delivery 
notifications  that  list  Cohen's  address  as  the  address  for  Subject  Premises-1.  Cohen  has  also 
provided  the  address  of  Subject  Premises-1  as  the  address  for  Essential  Consultants  and  Michael 
D.  Cohen  &  Associates,  P.C.  For  example,  the  certificates  of  incorporation  and  account  opening 
documents  at  First  Republic  for  both  entities  list  their  addresses  as  the  address  for  Subject 
Premises-1.  See  supra  If  18(b),  18(d).  The  consulting  agreement  between  Essential  Consultants 
and  AT&T  also  indicated  the  address  for  Essential  Consultants  is  the  address  for  Subject  Premises- 

1.  See  supra  %  19(c). 

47.  There  is  also  probable  cause  to  believe  that  Subject  Premises-1  is  likely  to  contain 
instrumentalities,  evidence,  and  fruits  of  die  Subject  Offenses.  Specifically,  from  my  review  of 
emails  produced  pursuant  to  subpoena  and  die  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 

as  my  training  and  experience,  I  know  the  following: 
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a.  According  to  records  maintained  by  Sterling,  the  address  for  all  of  Cohen  s  taxi 
medallion  LLCs  is  the  address  for  Subject  Premises-1.  See  supra  f  16(c).  Additionally,  the 
medallion  loan  documents  indicate  that  any  mailings  related  to  the  loans  should  be  sent  to  Subject 
Premises-1 .  See  id.  Based  on  my  training  and  experience,  as  well  as  my  review  of  public  sources, 

I  know  that  individuals  keep  records  of  properties  and  assets  in  which  they  have  ownership 
interests.  Accordingly,  I  submit  that  Subject  Premises-1  likely  contains  evidence  of  Cohen’s 
ownership  of  the  taxi  medallion  .LLCs,  the  revenue  that  those  medallions  generate,  and  the 
transaction  with  Sterling  in  20 1 4  to  re-finance  the  medallion  loans  that  were  then  with  Capital  One 

Bank, 

b.  From  my  review  of  records  maintained  by  Sterling,  I  also  know  that  Steiling 

addressed  documents  relating  to  th|  transaction  and  Cohen’s  attempts  to  modify  the 

terms  of  the  medallion  loans  to  Subject  Premises-1.  For  instance,  Sterling  addressed  the 
transaction  term  sheet,  see  supra  Tf  16(1),  and  its  demand  letter  and  notice  of  default,  see  supra  If 
16(q),  to  Subject  Premises-1.  Accordingly,  Subject  Premises-1  likely  contains  evidence 
concerning  the  transaction  and  Cohen’s  negotiations  with  Sterling.  Some  of  those 

records — such  as  records  relating  to  a  payment  from  Cohen  to  were  concealed  from 

Sterling  and  cannot  be  obtained  via  subpoena  to  Sterling.  Additionally,  even  where  documents 
were  sent  to  Cohen  by  Sterling  (and  therefore  are  available  from  Sterling  via  subpoena),  the  fact 
that  they  may  be  found  in  Subject  Premises-1  will  be  relevant  to  Cohen’s  possession  or  knowledge 
of  the  documents. 

c.  From  my  review  of  records  maintained  by  First  Republic,  I  know  that  Cohen 
provided  the  address  for  Subject  Premises-1  as  the  mailing  addresses  for  the  Essential  Consultants 
Account  and  MDC&A  Account.  See  supra  1 8(b),  18(e).  Accordingly,  it  is  likely  that  Subject 
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Premises-!  contents  records  relating  to  the  Essential  Consultants  Account  and  MDC&A  Account, 
including,  among  other  things,  account  opening  doemuents,  bank  statements,  documents  provided 
as  part  of  the  know-your-customer  process,  any  notes  made  by  Cohen  when  he  was  opemng  the 
accounts,  wire  transfer  records,  and  canceled  checks.  Even  where  these  records  can  be  obtained 
from  First  Republic,  the  fact  that  they  may  be  found  in  Subject  Premises-!  will  be  relevant  to, 
among  other  things,  Cohen’s  ownership  of  the  accounts,  or  his  knowledge  of  transactions 

existence  of  funds  in  accounts. 

- ’^jiTTifaserl'bnniyTevrevfof  records- maintained  by-CapitaLOneTiank,  TD  Bank1Morgan 

Stanley,  City  National  Bank,  Signature  Bank,  and  Bethpage  Credit  Union,  I  know  that  Cohen 
provided  to  addrass  for  Subject  Premises-!  as  tee  mailbag  for  his  accounts  a,  each  of  these 
financial  institutions.  Accordingly,  it  is  likely  teat  Subject  Premises-!  contains  records  .elating  to 
these  accounts,  including,  among  other  things,  bank  statemente  that  list  account  balances.  The 
existence  of  these  records  in  Subject  Premises-1  will  be  relevant  to,  among  other  things,  Cohen’s 
ownership  of  tee  accounts  and  his  knowledge  of  the  balances  in  these  accounts. 

e.  Additionally,  Cohen  may  have  records  of  other  bank  accounts  or  assets  teat  were 

not  disclosed  to  Sterling  and  am  no,  presently  known  by  law  enforcement.  For  example,  as 
described  above,  Cohen  has  received  interest  hreome  since  2015  teat  he  has  not  disclosed  to 
Sterling  or  paid  taxes  on.  Also,  on  Cohen’s  August  2014  Finanoial  Statement,  see  supra  1 16(e), 
he  disclosed  $10,000,000  in  “investments  in  oversea"  entities.  3  The  value  of  these  inves 
was  omitted  from  subsequent  financial  statements.  However,  for  tee  reasons  outlined  above,  there 
is  probable  cause  to  believe  that  Cohen  omitted  tee  value  of  those  investments  from  his  2017 
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filial  statements  in  order  to  understate  his  assets.  As  Subject  Premises-!  is  Cohen’s  primary 

residence  and  he  uses  Subject  Premises- 1  as  die  mailing  address  for  bank  records,  there 

cause  to  believe  Era,  account  statements  for  unknown  baric  accounts  or  assets  concealed  torn 

Sterling  are  likely  to  be  found  in  Subject  Premises- 1 . 

f.  Based  on  my  review  of  records  maintained  by  AT&T  and  produced  pursuantto  the 

Cohen  Email  Warrants,  I  know  drat  the  address  Cohen  provided  to  AT&T  for  Essential  Consultants 

is  the  address  for  Subject  Premises-1.  See  supra  1  19(e).  Therefore,  there  is  probable  cause  ,0 

Irelieve^thaTSubjeerPremisesrl- wilk"Contain-evidenee-GOncemmg-the_Qperatipn  of  Jessenhri 

Consultants  or  money  that  Cohen  received,  through  Essential  Consultants,  fern  AT&T. 
Additionally,  because  Cohen  used  the  address  for  Subject  Premises-1  for  at  least  one  consulting 
atrangement  involvmg  Essential  Consultants,  there  is  probable  cause  to  beiieve  tha,  Subject 
Premises-1  may  contarn  records  of  other  conspiring  arrangements  that  Cohen,  Enough  Essmtial 

Consultants,  has  with  other  individuals  or  entities. 

g.  Based  on  my  review  of  records  maintained  by  OetzePs  accounting  firm,  and  emails 

produced  pursuant  to  the  Cohen  Email  Warrants.  1  have  learned  that  Getzel’s  accounting  firm  sent 

documents  to  Subject  Premises-1  and  used  the  address  for  Subjec.Premises-1  as  the  address  Usrid 

on  Cohen's  personal  and  corporate  tax  rerirns.  See  supra  1  16(n).  For  instance,  on  or  about 

October  6,  2017,  an  employee  at  Getzel's  accounting  firm  emailed  Cohen  that  she  h 

Cohen's  September  2017  Financial  Statement  by  FedEx  to  Cohen's  attention.  Accordingly, 

Cohen's  tax  records  are  likely  to  be  found  in  Subject  Premises-1. 

h.  Based  on  m,  review  of  bank  records  and  publicly-available  documents,  I  know  that 

Cohen  used  $130,000  from  a  home  equity  line  of  credit  on  Subject  Premises-1  to  pay  Clifford.  I 

also  know  that  on  the  settlement  and  nondisclosure  agreement  between  “Peggy  Peteisori’  and  "EC, 
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LLC”  the  address  for  Essential  Consultants  is  Subject  Premises-1.  Accordingly,  Subject 
Premises- 1  is  lilcely  to  contain  evidence  of  the  Campaign  Finance  Offenses,  including  settlement 
and  nondisclosure  agreements,  payment  records,  written  and  email  correspondence,  and  records 

pertaining  to  the  home  equity  line  of  credit. 

i.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants  and 

iCloud  Warrant,  I  know  that  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mini,  and  a 
MacBook  Pro  to  access  his  iCloud  account.  Based  on  my  review  of  location  records  provided  by 
Apple  pursuant  to  the-iCloud  Warrant,  J  laiowjthat_eiectrqnic  devices  linked  to  Cohen’s  iCloud 
account  were  used  at  Subject  Premises-1  to,  among  other  things,  place  telephone  calls  and  backup 
files  to  Cohen’s  iCloud  account.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 
Premises-1  contains  electronic  devices,  including  certain  Apple  products,  that  for  reasons 

discussed  below  are  lilcely  to  contain  evidence  of  the  Subject  Offenses. 

j.  Based  on  my  review  of  emails  produced  pursuant  to  the  Cohen  Email  Warrants,  I 

understand  that  Subject  Premises-1  recently  sustained  water  damage  to  certain  parts  of  the 
premises,  and  that  Cohen  has  engaged  contractors  to  perform  certain  remediation  work  on  the 
premises.  In  addition,  as  set  forth  above,  I  believe  that  Cohen  and  his  family  are  temporarily 
residing  at  Subject  Premises-4  in  the  Loew’s  Regency  Hotel,  which  is  approximately. two  blocks 
from  Subject  Premises-1.  However,  based  on  my  review  of  a  work  order  sent  to  Cohen’s  email 
by  a  contractor,  I  understand  that  the  first  phase  of  the  work  order  called  for  the  contractor  to  ‘Tack 
&  Remove  all  items  &  furnishings  in  Living  Room,  Kitchen,  Sons  Room  &  Dining  Room  and 
store  them  off-site.  In  addition,  based  on  my  review  of  drawings  sent  to  Cohen  by  the  contractor, 
it  appears  that  the  work  is  primarily  being  done  in  these  rooms.  Thus,  I  believe  that  the 
construction -to  the  extent  it  is  still  ongoing  -  would  not  necessarily  have  caused  Cohen  to  move 
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all  documents  or  evidence  responsive  to  die  warrant  out  of  Subject  Premises-1,  because  it  does  not 
appeal-  that  work  is  being  done  to  the  portion  of  Subject  Premises-1,  such  as  a  home  office  or 
Cohen’s  own  room,  where  such  documents  or  evidence  would  most  likely  be  found. 

48.  Second,  there  is  probable  cause  to  believe  that  Cohen  uses  Subject  Premises-2  as 
office  space,  and  also  that  Subject  Premises-2  contains  certain  electronic  devices.  Specifically, 
from  my  review  of  the  “strategic  alliance  agreement”  between  Squire  Patton  Boggs  and  Cohen, 
and  my  review  of  the  press  release  on  Squire  Patton  Boggs’s  website,  I  know  that  Cohen  has  an 
0ffiee-at-Subject-Premises^.-iSe^iS^M-^J^(d)aJL9(glL  Indeed,  I  have  learned  that  pursuant^ 
Cohen’s  agreement  with  the  law  firm,  he  has  “dedicated  and  segregated  office  space”  m  Squire 
Patton  Boggs’s  offices  on  the  23rd  floor  of  30  Rockefeller  Plaza,  and  that  the  space  is  “physically 
separate”  from  the  firm’s  offices  and  has  “locked  doors  and  its  own  locked  file  cabinets.”  See 
supra  If  19(e).  Additionally,  I  know  that  under  the  terms  of  the  agreement,  Cohen  agreed  to 
“arrange  for  [his]  own  computer  server  system  that  is  not  connected  to  [Squire  Patton  Boggs  s] 
computer  network  system.”  I  know  from  my  participation  in  an  interview  with  Getzel,  who  met 
Cohen  at  Subject  Premises-2  in  2017,  that  Subject  Premises-2  is  an  office  with  a  door,  it  appears 
to  be  used  only  by  Cohen,  and  it  contains,  among  other  things,  a  computer  and  paper  files. 
According  to  Getzel,  when  Getzel  saw  Cohen  at  Subject  Premises-2,  he  had  two  cellular 
telephones  in  Subject  Premises-2.  I  also  know  from  my  review  of  emails  produced  pursuant  to  the 
Cohen  Email  Warrants  that  Cohen  uses  the  address  for  Subject  Premises-2  in  the,  signatuie  block 


31  As  noted  below,  based  on  my  training  and  experience,  I  believe  that  individuals  who  Irayel  or 
stay  in  hotels  for  short-term  periods  commonly  bring  some  items  with  them,  such  as  portable 
electronic  devices  or  sensitive"  items,  meaning  that  Cohen  has  likely  taken  some  evidence  Irom 
Subject  Premises-1  to  Subject  Premises-4.  Nevertheless,  given  the  temporary  natire  of  Cohen  s 
stay  at  Subject  Premises-4  and  the  scope  of  the  work  being  done  at  Subject  Premises- 1,1  believe 
it  is  unlikely  that  Cohen  has  taken  all  evidence  that  would  be  subject  to  seizure  out  of  Subject 

Premises-1. 
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on  his  emails.  Based  on  my  review  of  notes  of  a  call  between  Cohen  and  First  Republic  Employee- 
2  (which  notes  were  taken  by  another  Fust  Republic  employee,  who  was  participating  m  the  call 
and  taking  notes),  I  know  that,  on  or  about  November  15,  2017,  Cohen  told  First  Republic 
Employee-2  that  he  had  a  new  office  at  30  Rock.  Moreover,  I  know  Rom  an  article  in  Vanity  Fair 
published  on  or  about  February  14, 2018,  that  Cohen  was  interviewed  by  the  magazine  m  Subject 
Premises-2  in  or  about  February  2018. 

49.  There  is  also  probable  cause  to  believe  that  Subject  Premises-2  is  likely  to  contain 
i„.-,n:,iK-.ii„liiiea.  eufe-cc.  m,d  :mi..s  ■„  ■«-  Suyc:  Offend.  Speciflcall^ftom  my  review  of 
emails  produced  pursuant  to  subpoena  and  the  Cohen  Email  Warrants  and  iCloud  Warrant,  as  well 

as  my  training  and  experience,  I  know  the  following: 

a.  According  to  records  maintained  by  Sterling,  when  Cohen  was  emailing  with 
Sterling  Employee-3  in  20 1 8  about  a  modification  to  his  existing  loan  from  Sterling,  Cohen  listed 
his  address  in  his  email  as  the  address  for  Subject  Premises-2.  See  supra  If  16(t),  16(uj. 
Accordingly,  Subject  Premises-2  likely  contains  evidence  concerning  Cohen’s  loan  modification 

negotiations  with  Sterling, 

b.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  the  address  Cohen  provided  to  KAI  and  BTA  for  Essential  Consultants  is  tire  address 
for  Subject  Premises-2.  See  supra  19(a),  19(b).  Therefore,  there  is  probable  cause  to  believe 
that  Subject  Premises-2  will  contain  evidence  concerning  the  operation  of  Essential  Consultants 
or  money  that  Cohen  received,  through  Essential  Consultants,  from  KAI  and  BTA,  among  other 
entities  with  which  Cohen  had  a  consulting  arrangement.  Additionally,  based  on  my  review  of 
emails  sent  in  201 8  that  were  obtained  pursuant  to  the  Cohen  Email  Warrants,  I  know  that  Cohen 
continues  to  enter  into  consulting  arrangements  through  Essential  Consultants,  and  agreements 
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relating  to  those  arrangements  indicate  tat  Essential  Consnltants  is  located  a,  Subject  Premises- 
2;  Additionally,  because  Cohen  used  the  address  for  Subject  Premises-2  for  multiple  consulting 
arrangements  involving  Essential  Consultants,  there  is  probable  cause  to  believe  that  Subject 
Premises-2  may  contain  records  of  other  unknown  consulting  arrangements  that  Cohen  has  with 

other  individuals  or  entities, 

e.  Based  on  my  review  of  records  maintained  by  Getzel’s  accounting  fitnr,  and  emails 
produced  pursuant  to  the  Cohen  Email  Warrants,  as  well  as  my  participation  in  art  interview  with 

^ GbteehThave"learhed'tlrat"Getzel'visited-SUbjeet-Piemises-2tomeet-Wilh-CQhenabouthistaxfiS: 

See  supra  1 20(a).  At  that  meeting,  Getzel  discussed  with  Cohen  whether  Cohen  should  disclose 
Essential  Consultants  on  his  personal  financial  statement  to  banks.  According,  there  is  probable 
cause  to  believe  that  Subject  Premises-2  will  contain  evidence  relating  to  Cohen’s  taxes,  or  notes 
of  his  conversation  with  Getzel.  Moreover,  the  fact  that  Cohen  used  Subject  Premises-2  for  a 
meeting  regarding  his  personal  financial  matters  provides  probable  cause  to  believe  that  documents 

and  information  regarding  his  finances  will  be  found  in  Subject  Premises-2. 

d.  Based  on  my  participation  in  an  interview  with  Getzel,  I  know  that  Cohen  maintams 

a  computer  in  Subject  Premises-2.  From  my  review  of  IP  data  produced  pursuant  to  a  subpoena 
and  pen  register  to  Google,  it  appears  that  Cohen  is  logging  into  his  Gmail  account  from  Subject 
Premises-2.  Accordingly,  there  is  probable  cause  to  believe  that  Subject  Premises-2  contains 
electronic  devices,  tat  for  reasons  discussed  below  are  likely  to  contain  evidence  of  the  Subject 

Offenses. 

e.  Based  upon  my  training  and  experience,  I  have  learned  that  individuals  who 
maintain  businesses  typically  keep  records  relating  to  the  business-such  as  contracts  with  clients 
and  records  of  payments-at  the  business’  identified  location.  I  am  not  aware  of  any  addresses 
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associated  with  Essential  Consultants  other  than  Subject  Premises-1  and  Subject  Piemtses  2. 
Accordingly,  there  is  probable  eause  to  believe  that  Subject  Premises-1  and  Subject  Premises-2 

will  contain  business  records  for  Essential  Consultants. 

50.  Third,  there  is  probable  cause  to  believe  that  Subject  Premises-3  is  likely  to  contain 

instrumentalities,  evidence,  and  fruits  of  the  Subject  Offenses.  In  particulars 

a.  As  noted  above,  Cohen  has  two  bank  accounts  at  TD  Bank.  In  or  about  November 
2017,  as  Cohen  was  receiving  substantial  income  from  consulting  work-which  he  did  not  disclose 

tolta^ 

light  of  the  aforementioned  evidence  that  Cohen  conceals  assets,  including  assets  at  TD  Brnrk, 
tore  is  probable  cause  to  believe  that  Subject  Premises-3  contains  financial  asset,,  objects  of  value 
and/or  documents  relating  to  such  assets  or  objects  of  value  that  Cohen  likely  did  not  disclose  to 
Sterling.  Weed,  based  on  my  training  and  experience,  I  am  aware  that  people  often  conceal 
valuable  items  in  safety  deposit  boxes.  Accordingly,  there  is  probable  cause  to  believe  that  Subject 

Premises-3  will  contain  evidence  of  the  Bank  Fraud  Offenses. 

b.  hr  addition,  based  on  my  review  of  records  Reduced  by  TD  Bank,  I  know  that 

Cohen  has  accessed  the  vault  in  which  Subject  Premises-3  is  stored  on  two  occasions.  The  first 
such  occasion  was  onNovember  10, 2017.  Cohen  signed  into  the  vault  a,  approximately  5:35  and 
out  of  vault  at  approximately  5 :39  on  that  date  *  Based  on  my  review  of  toll  records,  I  know  that. 
Cohen’s  first  call  after  he  signed  out  of  the  safety  deposit  box-  approximately  45  minutes  later- 
was  to  Keith  Davidson.  Specifically,  at  6:25  pun.  Cohen  ealled  Davidson  and  they  spoke  for  less 
than  a  minute;  three  minutes  later,  Davidson  called  Cohen  bade  and  they  spoke  for  approximately 
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22  minutes.  The  second  such  occasion  was  on  February  2.  201 8.  which  is  during  the  time  period 
numerous  media  reports  about  Cohen's  payment  to  Clifford  were  being  published,  and  is  one  day 
after  it  appears  that  Cohen's  family  moved  into  Subject  Premises-4,  as  set  forth  above.  The  timmg 
of  Cohen’s  two  visits  to  the  vault -one  shortly  before  a  call  to  Keith  Davidson  and  the  other  around 
the  time  that  Cohen  came  under  media  scrutiny  in  comtection  wiftr  the  payment  to  Davidson's 
client— gives  rise  to  probable  cause  to  believe  that  Subject  Premises-3  will  contain  evidence  of  die 
Campaign  Finance  Offenses,  such  as  documents  relevant  to  the  Cohen  s  dealmg 

Davidson  and  the  paymenffirCItg^^  ^  ^ 

to  leave  in  his  apartment  where  construction  workers  would  be  present.33 

51.  Based  on  my  review  of  emails  obtained  pursuant  to  the  CohenEmail  Warrants  and 

cell  Phone  location  information,  I  believe  to,  Cohen  is  temporarily  residing  in  Subject  Premises- 
4.  *.  ^ru  1,  3(d).  There  is  also  probable  cause  to  believe  tot  Subject  Premises-4  contams 

instrumentalities  and  evidence  of  the  Subject  Offenses,  including,  the  following: 

a.  As  described  above,  1,  appears  tot  Cohen  moved  to  Subject  Premises-4  on  or  about 

February  1,  2018,  a,  which  time  numerous  med.a  reports  about  Cohen's  involvement  in  the 
'  payment  to  Clifford  were  being  published.  See  s*ra  11  3(d).  During  this  time  same  period, 

Cohen  was  frequently  correspondhrg  widr  to  media  and  sen,  himself  and  otors  statements  about 
his  involvement  in  the  payment  to  Clifford.  See  supra  11 42(a)-(c).  Thus,  tore  is  probable  cause 
that  Cohen  took  a,  leas,  some  do—  and  evidence  relafing  to  to  Clifford  paymentwidr  hnn 
,o  Subject  Premises-4,  in  order  to  reference  and  consul,  tom  in  connection  with  these  statements. 


approximately  five  inches  by  ten  inches.  Accordingly,  I. 


33  As  noted  above,  Subject  Premises-3  is  approxima  e  y  ive  however  a  small  number 

SSSTEE? — -  •  “  -  - 

portable  stSage  device,  would  fit  in  Subject  Prenuses-3. 
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b.  As  described  above,  at  the  time  Cohen  moved  to  Subject  Premises-4,  he  was  also 
in  the  midst  of  ongoing  negotiations  with  Sterling  regarding  the  refinancing  of  his  medallion  debts. 

For  example,  on  January  30, 20 1 8,  Cohen  had  a  length,  phone  call  with  Sterling  Employee-3  about 
bis  finances  and  the  proposed  restructuring,  and  on  February  1,  2018,  Cohen  sent  an  email  to 
Sterling  Employed  claimmg  that  he  did  no,  have  more  than  $1 .25  million  hr  -  S-  «P»  tl 
16(u).  Thus,  there  is  probable  cause  drat  Cohen  took  at  leas,  some  documents  and  evidence  relating 
to  his  ongoing  negotiations  with  Sterling  with  him  to  Subject  Premises-4,  in  order  to  reference  and 

consult  them  in  connection  with  these  negotiations. 

c.  As  described  above,  Cohen  used  at  least  one  Apple  iPhone,  an  Apple  iPad  Mim, 

and  a  MacBook  Pro  to  access  his  iCloud  account,  and  these  electronic  devices  United  ,0  Cohen’s 
iCloud  account  were  used  at  Subject  Premises-l  -  Cohens’  permanent  residence  -  to.  place 
telephone  calls  and  backup  fries  to  Cohen’s  iCloud  account.  See  supra  47(i).  Although  Cohen’s 
stay  a.  Subject  Premises-4  is  temporary,  based  on  my  teaming  and  experience  I  know  that 
individuals  who  travel  or  stay  in  hotels  for  short-term  periods  commonly  bring  portable  electronic 
devices  with  them,  such  as  cellular  phones,  tablets,  or  laptops.  Accordingly,  them  is  probable 
cause  to  believe  that  Subject  Premises-4,  where  Cohen  currently  appears  to  be  residing,  conhrins 
electronic  devices,  including  Subject  Device-1,  Subject  Device-2,  and/or  certain  Apple  products, 
teat  for  the  reasons  discussed  herein  ate  likely  to  contain  evidence  of  the  Subject  Offenses. 

d.  Moreover,  as  se,  forte  above,  based  on  cellphone  location  information  I  know  tea, 
Subject  Device-1  and  Subject  Device-2  were  in  tee  vicinity  of  Subject  Premises-4  as  gently  as 
this  morning  (April  8,  2018).  As  set  forte  above,  there  is  probable  cause  to  beUeve  teat  Cohen 
used  tee  subject  Devices  in  furtherance  of  the  Subject  Offenses,  hrclnding  to  communicate  with 
Sterling  employees  regarding  tee  medteion  transaction,  with  Firs,  Republic  employees  regarding 
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the  Essential  Consultants  Account,  with  his  accountant  regarding  his  finances,  and  with 
individuals,  such  as  Davidson,  Howard  and  Pecker,  involved  in  the  $130,000  paymentto  Clifford. 

52.  Although  Cohen  appears  to  be  residing  currently  in  Subject  Premises-4,  it  is 
unknown  whether  Cohen  will  be  physically  present  within  Subject  Premises-4  at  the  moment  the 
warrant  sought  herein  are  executed.  If  Cohen  is  within  Subject  Premises-4  atthatmoment,  Subject 
Device-1  and  Subject  Device-2  -  his  cellphones  -  will  likely  also  be  within  Subject  Premises-4. 
If  Cohen  is  not  within  Subject  Premises-4  at  that  moment,  the  devices  will  likely  be  on  his  person, 
wherever  he  is  located  (whichrbased  on  locatiorudata  fouSubject  Device- f  and  Subject  Device-2_ 
as  recently  as  today,  is  likely  to  be  in  the  Southern  District  of  New  York).  As  such,  this  warrant 
seeks  separate  authority  to  seize  Subject  Device- 1  and  Subject  Device-2,  in  the  event  that  those 
devices  are  not  located  within  Subject  Premises-4  (or  another  Subject  Premises)  at  the  moment  the 

warrants  sought  herein  are  executed. 

D.  Probable  Cause  Justifying  Search  of  ESI 

53.  Based  on  the  foregoing,  there  is  probable  cause  to  believe  that  Subject  Premises-1, 

Subject  Premises-2  and  Subject  Premises-4  contain  electronic  devices  that  are  likely  to  contain 
evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses  (and,  as  set  forth  above,  that  Subject 
Device- 1  and  Subject  Device-2  are  themselves  electronic  devices  that  are  likely  to  contain 
evidence  of  the  Subject  Offenses).  Specifically,  based  on  my  review  of  information  produced 
pursuant  to  the  Cohen  Email  Warrants,  the  iCloud  Warrant,  and  subpoenas,  as  well  as  pen  register 
data,  I  submit  that  there  is  probable  cause  that  Subject  Premises-1  contains  an  Apple  iPad  Mini,  a 
MacBoolc  Pro,  and  has,  at  various  times,  contained  Apple  cellphones;  similarly,  theie  is  probable 
cause  that  Subject  Premises-2  contains  a  computer  and  has,  at  various  times,  contained  Apple 
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cellphones.  These  deuces  are  likely  to  include  evidence,  fruits,  and  instrumentalities  of  the 

Subject  Offenses  for  the  following  reasons: 

a.  As  described  throughout  this  affidavit,  Cohen  used  email  to  send  and  leceive 

communications  related  to  the  Subject  Offenses.  In  particular,  Cohen  used  email  to  send  and 
receive  communications  with  Sterling,  Firs.  Republic,  Getzel,  the  entities  to  which  he  is  providing 
consulting  services,  Davidson,  and  Howard,  among  others.  While  some  of  these  emarls  have 
already  been  obtained  via  subpoenas  and  search  warrants,  I  know  horn  my  tiaming  and  exp 
-ffiaTindlviduals-can-and-do-delete  emaUs-fam. their: Internet-based  inboxes  but  retain  copies  of_ 

arose  emails  on  then  hard  drives.  I  also  know  that  individuals  often  have  multiple  email  accounts, 
some  of  which  may  not  be  known  to  law  enforcement,  and  as  a  result  electronic  devices  can  be  a 
unique  repository  of  all  emails  relevant, 0  certain  Subject  Offenses.  Indeed,  from  my  involvement 
in  this  investigation,  I  know  that  Cohen  had  an  email  account  with  the  Trump  Organization,  but 
tire  USAO  and  FBI  have  not  been  able  to  obtain  the  contents  of  that  account  to  date.  Thus,  emails 
relevant  to  the  Subject  Offenses  are  likely  stored  on  electronic  devices  in  Subject  Premises-1, 

Subject  Premises-2  and/or  Subject  Premises-4. 

b.  Additionally,  SubjeCPremises-1,  Subject  Premise-2  and  Subject  Premises-4  likely 

contain  electronic  copies  of  documents  relevant  to  the  Subject  Offenses.  Indeed,  I  know  from  my 
training  and  experience  drat  individuals  often  retain  copies  of  important  documents  on  their 
computers  or  other  electronic  devices  capable  of  storing  information,  including  cellphones  (such 
as  the  Subject  Devices)  and  table*.  Here,  there  are  a  number  of  documents  that  Cohen  has  likely 
retained  that  will  be  relevant  to  die  Subject  Offenses.  For  example,  electronic  devices  may  include 
documentation  of  Cohen’s  true  net  worth,  a  listing  of  his  assets,  an  accounting  of  his  available 
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cash,  consulting  agreements  with  third  parties,  and  documentation  of  his  payment  to  Clifford, 

among  other  evidence  of  the  Subject  Offenses. 

C.  Third,  I  know  tom  my  review  of  emails  obtained  pursuant  to  the  Cohen  Email 

Warrants  that  Cohen  sent  up  online  hanking  with  Firs,  Republic.  Based  on  my  training  and 
experience,  I  know  that  individuals  who  set  up  online  banking  often  receive  electronic  notices 
concerning  financial  transactions  and,  on  occasion,  save  records  of  their  financial  transactions  to 
their  devices.  Accordingly,  there  is  probable  cause  to  believe  that  Cohen’s  electronic  devtces 
~~^mrtainevidence  of  bankingabtiyily,igcludmgthe^astence  of  bartk-accauntaor  assets  that  Cohen_^ . 
did  not  disclose  to  Sterling  or  Melrose. 

d.  Fourth,  from  my  review  of  records  produced  by  Apple,  I  know  that  Coh 
communicates  using  text  message  as  well  as  encrypted  communications  applications.  These 
applications  that  Cohen  has  downloaded  onto  a  phone  include,  but  are  not  limited  to,  WhatsApp, 
Signal,  and  Dust  I  know  from  my  review  of  toll  records  and  text  messages  that,  in  particular, 
Cohen  communicated  with  Pecker  using  these  encrypted  applications.  Accordingly,  there  ts 
probable  cause  to  believe  that  Cohen’s  cellphones  -  the  Subject  Devices  -  will  contain  encrypted 
-...ages  that  are  not  otherwise  accessible  relating  to  the  Subject  Offenses. 

■  54.  Based  on  m,  training  and  experience,  I  know  that  individuals  who  engage  in 
financial  crimes  commonly  use  compute,*  to  communicate  with  -conspirators,  keep  financial 
tedgers,  and  retain  fraudulent  documents.  As  a  result,  toy  often  store  data  on  their  computers 
related  to  their  illegal  activity,  which  can  include  logs  of  online  or  cellphone-based  -chats’’  with 
co-conspirators;  email  correspondence;  contact  information  of  co-conspirators,  including 
telephone  numbers,  email  addresses,  and  identifiers  for  instant  messaging  and  social  medial 
accounts;  bank  account  numbers;  and/or  records  of  uses  of  funds. 
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55.  Based  on  my  training  and  experience,  I  also  know  that,  where  computers  are  used 
i„  furtherance  of  criminal  activity,  evidence  of  the  criminal  activity  can  often  be  found  months  or 

even  years  after  it  occurred.  This  is  typically  true  because: 

.  Electronic  files  can  be  stored  on  a  hard  drive  for  years  at  little  or  no .cost and  users  thus 
have  little  incentive  to  delete  data  that  may  be  useful  to  consult  the  futnr  . 

.  Even  when  a  user  does  choose  to  delete  date,  the  data  can  often  be  recovered  months 

m  ^"^as^cache”1 flU^SSTreplaJed  with  more  recently  viewed  Internet 
plges.  Thus,  the  ability 

•  tabte- 

.  In  the  event  that  a  user  changes  computers ““ Je‘“  rnfftl'lddiilommeK  often 

rr-iadsuch  as  drmnb  drives,  ftash 
memory  cards,  CD-ROMs,  or  portable  hard  drives. 

56.  Based  on  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
Cohen  engaged  in  the  Subject  Offenses,  and  that  evidence  of  this  criminal  activity  is  likely  to  be 
found  in  die  Subject  Premises,  on  computers  and  electronic  media  found  in  the  Subject  Premises, 
and  on  the  Subject  Devices.  In  particular,  there  is  probable  cause  to  believe  that  the  Subject 
Premises  mrd  Subject  Devices  will  contain  evidence,  fruits,  and  insftunrentalities  ofviolations  of 
the  Subject  Offenses,  as  more  fully  described  in  Section  H  of  Attachments  A,  B,  C,  D,  E  and  F  to 

the  proposed  warrants,  including  the  following: 

a.  Evidence  necessary  to  establish  tire  occupancy  or  ownership  of  the  Subject 

Premises,  including  without  limitation,  utility  and  telephone  bills,  mail  envelopes,  addressed 

correspondence,  bank  statements,  identification  documents,  and  keys. 

b.  Evidence  relating  to  Sterling,  Melrose,  and/or  taxi  medallions. 
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c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Cohen  and/ol  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  tc 


|and/or  entities  associated  with  him. 


LU  UUMOj  uiviww.*  £> 

d.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modily  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

e.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  hum  Essentia.  Consultants  or  toe  natore 

:,„y  wort  .tone  .•>  C  5  mm  an.  cher  individual  in  e  ■  meetion  Essential .  am  - 

f.  Evidence  of  income  to  Michael  D,  Cohen  &  Associates,  including  any  documents 
tout  indicate  toe  natore  and  puipose  of  payments  made  to  or  tan  Michael  D.  Cohen  &  Associates, 
or  evidence  ofthe  purpose  of  accounts  opened  to  toe  name  of  Michael  D.  Cohen  *  Associates. 

g.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 

entities,  including  tax  returns,  personal  financial  statements,  and  bank  records. 

h.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  md  any  payments  by  Cohen. 


md  any  payments  b> 

"  Evidence  relating  to  payments  to  Stephanie" Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 

and  any  communications  related  to  such  agreements. 

j.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 

agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 

payments  to  Stephanie  Clifford  or  Karen  McDougal. 
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k.  Evidence  of  communications 
David  Pecker,  and/or  Dylan  Howard  about 


involving  Michael  Cohen,  American  Media,  Inc., 
Donald  Trump,  the  Trump  Campaign,  Stephanie 


Clifford,  and/or  Karen  McDougal. 

Evidence  relating  to  Cohen's  role  to  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

m.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  toe  to  Hollywood  tape  and  other  potential  sources  of  negative 

publicity  nvo'.vi'y.  Trump's  relationship  totta  runup  tatoeelectiom  -  - 

Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 

payment  to  Clifford  or  others  in  connection  with  the  election. 

o.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 

contribution  reporting  requirements,  and  campaign  contribution  limits. 

p.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 

relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

q.  Communications,  records,  documents,  and  other  files  reflecting  false 

representations  to  a  financial  institution  related  to  the  intended  pmpose  of  an  account  or  loan  at 


that  financial  institution;  toe  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  toe  purpose  or  nature  of  any 

financial  transactions  involving  that  financial  institution; 

r.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 


IH.  Procedures  for  Searching  ESI 
A.  Execution  of  Warrant  for  ESI 

57.  Federal  Rule  of  Criminal  Procedure  4 1  (e)(2)(B)  provides 


for  and  seize  property  “may 


authorize  the  seizure  of  electronic  stoiage 
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eopying  of  electronically  stored  information  .  .  .  for  later  review."  Consistent  widr  Rule  41.  this 
application  requests  authorization  to  seize  any  computer  devices  and  storage  media  and  transport 
them  to  an  appropriate  law  enforcement  facility  for  review.  This  is  typically  necessary  for  a  number 

of  reasons: 

.  First,  the  volume  of  data  on 

for  law  enforcement  personnel  to  leview  in  its  ernueiy 

.  Second,  hecause  computer  date  is  pteticularly  "2*“  —d 

.  Third,  tare  are  so  many  ^pes  of  computer  hardware  "tatatal—l d 

■  safely  access  the 

underlying  computer  data* 

.  Four*,  many  factors  can  complicate 

device,  including  the  inci  easing  y  coi  conceal  data  on  the  computer,  which 

features  or  configurations  designe  op  f  .  personnel  to  detect  and  resolve, 
often  take  considerable  time  and  resources  foi  forensic  peisonn 

58.  As  discussed  herein,  Squire  Patton  Boggs  is  a  functioning  law  firm  that  conducts 
legitimate  business  unrelated  to  Cohen's  commission  ofta  Subject  Offenses.  Subject  Premises- 
2  is  an  office  located  inside  of  Squire  Patton  Boggs's  New  York  office.  In  order  to  execute  the 
warrant  in  ta  most  reasonable  fashion,  law  enforcement  personnel  wih  attempt  to  investtgate  on 
the  scene  of  what  computers  or  storage  media,  if  any,  must  be  seized  or  copied,  and  what  computers 
or  storage  media  need  not  be  seized  or  copied.  Law  enforcement  personnel  will  speak  with  Squire 
Patton  Boggs  personnel  on  ta  scene  as  may  be  appropriate  to  determine  which  files  and  electronic 
devices  wittun  Subject  Premises-2  belong  to  or  were  used  by  Cohen.  While,  based  on  the 
foregoing,  it  does  not  appear  tat  Cohen  shared  electronic  devices  or  a  server  with  Squire  Patton 
Boggs,  where  appropriate,  law  enforcement  personnel  will  copy  data,  ratar  than  physically  serze 
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colters,  to  reduce  the  extent  of  any  diction  of  Squire  Patton  Boggs’s  operations.  If,  after- 
inspecting  the  seized  computers  off-site,  it  is  deterged  tha,  some  or  ai.  of  this  equipment  is  no 
longer  necessary  to  retrieve  and  preserve  the  evidenee,  the  Government  will  return  it 

59.  Additionally,  because  Cohen  is  an  attorney,  and  ciaims  to  serve  as  a  personal 
attorney  for  Trump,  the  review  of  evidence  seized  from  the  Subject  Premises  and  Subject  Devices 
will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law  enforcement 
personnel  involved  in  the  investigation,  including  attorneys  for  the  Government,  collect  evrdenee 
i„  a  ,n,..„.o,  reasonably  designed  ro  protecianv  attorney-client  or  other  applicable  privilege.  SVheu 
appropriate,  the  procedures  will  include  use  of  a  designated  “frl Iter  team,”  separate  and  apsrtfrom 
the  investigative  team,  in  order  to  review  potentially  privileged  communications  and  determine 
which  communications  to  release  to  the  investigation  and  prosecution  team. 

B.  Accessing  ESI  on  the  Subject  Devices 

60.  As  described  above,  the  Subject  Devices  are  both  Apple  brand  devices. 

61.  I  know  from  my  training  and  experience,  as  well  as  from  information  found  in  ' 
publicly  available  materials  including  those  published  by  Apple,  that  some  models  of  Apple 
devices  such  as  iPhones  and  iPads  offer  their  users  the  ability  to  unlock  the  device  via  the  use  of  a 
fingerprint  or  thumbprint  (collectively,  “fingeiprint”)  in  lieu  of  a  numeric  or  alphanumenc 
passcode  or  password.  This  feature  is  called  Touch  ID.  I  also  know  that  the  Apple  iPhone  X  offers 

'  its  users  the  ability  to  unlock  die  device  via  the  use  of  facial  recognition  (through  M-ed  and 
visible  light  scans)  in  lieu  of  a  numeric  or  alphanumeric  passcode  or  password.  This  feature  is 

called  Face  ID. 

62.  If  a  user  enables  Touch  ID  on  a  given  Apple  device,  he  or  she  can  register  up  to  5 
fingerprints  tha,  can  be  used  ,0  unlock  tha.  device.  The  user  can  then  use  any  of  die  registered 
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fingerprints  to  unlock  the  device  by  pressing  the  relevant  finger(s)  to  the  device’s  Touch  ID  sensor, 
which  is  found  in  the  round  button  (often  referred  to  as  the  “home”  button)  found  at  the  bottom 
center  of  the  front  of  the  device.  If  a  user  enables  Face  ID  on  a  given  Apple  device,  he  or  she  can 
unlock  the  device  by  raising  the  iPhone  to  his  or  her  face,  or  tapping  the  screen.  In  my  tra 
and  experience,  users  of  Apple  devices  that  offer  Touch  ID  or  Face  ID  often  enable  it  because 
considered  to  be  a  more  convenient  way  to  unlock  the  device  tean  by  entering  a  numeric  or 
alphanumeric  passcode  or  password,  as  well  as  a  more  secure  way  to  protect  the  device’s  contents. 

- 63.  In somecircUtristances(TbuclfIDorFace'ID'cannot-be-used to  unlock  a_devtce  that 

has  either  security  feature  enabled,  and  a  passcode  or  password  must  be  used  instead.  These 
circumstances  include:  (1)  when  the  device  has  just  been  mrned  on  or  restarted;  (2)  when  more 
than  48  horns  has  passed  since  the  las,  time  the  device  was  unlocked;  (3)  when  the  passcode  or 
password  has  no,  been  entered  in  the  las.  6  days,  and  the  device  has  not  been  unlocked  viaTouch 
ro  in  die  .as,  8  hours  or  the  device  has  not  been  unlocked  via  Face  ID  in  the  last  4  horns;  (4)  tee 
device  has  received  a  remote  lock  command;  or  (5)  five  unsuccessful  attempts  to  unlock  the  device 

via  Touch  ID  or  Face  ID  are  made. 

64.  The  passcodes  or  passwords  tha,  would  unlock  fire  Subject  Devices  are  no,  known 
to  law  enforcement  Thus,  it  will  likely  be  necessary  to  press  the  fingers  of  the  user  of  the  Subject 
Devices  to  die  devices’  Touch  ID  sensor,  or  hold  the  Subject  Devices  in  front  of  the  user’s  face  to 

activate  the  Face  ID  sensor,  in  an  attempt  ,0  unlock  the  devices  for  the  purpose  of  executing  ttre 
search  authorized  by  this  warrant  Attempting  to  unlock  the  relevant  Apple  devices  via  Touch  ID 
.  With  the  use  of  file  fingerprints  of  the  user,  or  via  Face  ID  by  holding  tee  device  in  front  of  tee 
user’s  face,  is  necessary  because  tee  government  may  no,  otherwise  be  able  to  access  tee  date 
contained  on  those  devices  for  tee  purpose  of  executing  the  search  authorized  by  this  warrant. 
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65  Based  on  these  facts  and  my  training  and  experience,  it  is  likely  that  Cohen  is  the 

useI  of  the  subject  Device,  and  thus  that  his  fingeiprints  «  ^  ^ 

the  Subject  Devices  via  Touch  ID  or  his  face  is  able  to  uniock  the  Subject  Devices  via  Face  ID. 

66  Although  I  do  not  know  which  of  a  given  user’s  10  fingerprints  is  capable  of 

unlocking  a  particular  device,  based  on  my  training  and  experience  I  know  that  it  is  common  for  a 

user  to  unlock  a  Touch  ID-enabled  Apple  device  via  the  fingerprints  on  thumbs  or  index  fing 
the  even,  that  law  enforcement  is  unable  to  unlock  the  Subject  Devices  as  described  above 

~~withhr^fiveattemptspei‘mittedljyTduarlE?rtlriaxvill'Simply-rc3ult4n-the-devicalgauiringthg__ 
entry  of  a  password  or  passcode  before  it  can  be  unlocked. 

67  1  also  know  from  my  training  and  experience,  and  my  review  of  publicly  ava 

materials  published  by  Apple  that  Apple  brand  devices,  such  as  the  Subject  Devices,  have  a  feature 
that  allows  a  user  to  erase  the  contents  ofthe  device  remotely.  By  logging  into  die  Internet,  die 
user  or  any  other  individual  who  possesses  the  user’s  account  Information  can  take  ships  to 
completely  wipe  the  contents  ofthe  device,  thereby  destroying  evidence  of  criminal  conduct,  along 
with  any  other  information  on  the  device.  The  oidy  means  ,0  prevent  this  action  is  to  disable  the 
device's  ability  to  connect  to  the  Internet  immediately  upon  seizure,  which  requires  eldier  access 
to  the  device  itself  to  alter  the  settings,  or  the  use  of  specialized  equipment  thatisnotcon 

available  to  law  enforcement  agents  at  every  arrest. 

68  Due  to  die  foregoing,  I  request  that  die  Court  authorize  law  enforcement  to  press 

the  fingers  (including  thumbs)  of  Cohen  to  the  Touch  ID  sensors  die  Subject  Devices,  or  hold  the 

Subject  Devices  hi  fion,  of  Cohen’s  face,  for  the  pu,ose  of  attempting  to  unlock  die  Subject 

Devices  via  Touch  ID  or  Face  ID  in  older  to  search  the  contents  as  authorized  by  dlls  warrant. 
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C.  Review  of  ESI 

69.  Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation 
of  forensic  image  copies,  law  enforcement  personnel  (including,  in  addition  to  law  enforcement 
officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and 
related  proceedings,  attorneys  for  (he  government,  attorney  support  staff,  agency  personnel 
assisting  the  government  in  this  investigation,  and  outside  technical  experts  under  government 
control)  will  review  the  ESI  contained  therein  for  information  responsive  to  the  warrant. 

- ^yor^^Irrconducting-this-revigWrlaw-eiiforoentenfcltersopnel  mayuse  various  techniques 

to  determine  which  files  or  other  ESI  contain  evidence  or  fruits  of  the  Subject  Offenses,  Such 
techniques  may  include,  for  example. 

believed  to  contain  pertinent  files); 

•  ' ^^gltprfonSr.c-ory 

Elation 'of  each  document  in  a  file  cabinet  ft  determine  its  relevance); 

.  “scanning"  storage  areas  to  discover  and  possibly  reoover  recently  deleted  data  or 

deliberately  hidden  files;  and 

•  pd:Sh*^ 

the  investigation34;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 

reflating  how,  when,  and  by  whom  the  computer  was  used. 


14  Keyword  searches  alone  are  typically  inadequate  to  ^^^^^ages  ;yKj  videos,  do 
keyword  searches  work  only  for  text  data,  yet  many  I ype s  o  ’  information  properly 

“* 

contain  the  keywords  being  searched. 
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n.  Law  enforcement  personnel  will  make  reasonable  efforts  to  restrict  their  search  to 
data  falling  within  the  categories  of  evidence  specified  in  the  warrant.  Depending  on  the 
circumstances,  however,  law  enforcement  personnel  may  need  to  conduct  a  complete  review  of  all 


foe  ESI  from  seized  devices  or  storage  media  to  evaluate  its  contents  and  to  locate  all  data 

responsive  to  the  warrant. 

D.  Return  of  ESI 

72.  If  the  Government  determines  that  the  electronic  devices  are  no  longer  necessary 

^triretrieve  and  preserve  the^lata7and^hetievicesIhemselV5S''arer  not  subject- to-seizuie-pursuantto 

Federal  Rule  of  Criminal  Procedure  41  (c),  the  Government  will  return  these  items,  upon  request. 
Computer  date  that  is  encrypted  or  unreadable  will  not  be  returned  unless  law  enforcement 
personnel  have  determined  that  the  data  is  not  (i)  an  instrumentality  of  the  offense,  (ii)  a  fruit  of 
the  criminal  activity,  (iii)  contraband,  (iv)  otherwise  unlawfully  possessed,  or  (v)  evidence  of  the 


Subject  Offenses. 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and  F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 
FBI 


Sworn  to  before  me  on 
8th  day  of  April,  2018 

icj  CV  (?/~f  _ 

HON.  HENRY  B.  PITMAN 

UNITED  STATES  MAGISTRATE  JUDGE 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

•  for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  )  ' 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  ? 

New  York,  New  York  1 0065,  and  any  closed  / 

containers/items  contained  therein,  See  Attachment  D  ' 

_ _  _ SEARCH.  ANDSEIZIJl^  WAWANX 


To:  •  Any  authorized  law  enforcement  officer 


An  application,  by  a  federal  law  enforcement  officer  of  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Southern  District  of  - New  York - 


(identity  the  verson  or  describe  the  property  to  be  searched  and  give  its  location). 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1728,  New  York,  New  York  10065,  and  any  closed  containers/items 
contained  therein,  See  Attachment  D 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 

property  to  be  seized)'. 


See  Attachment  D 


property. 


;  find  that  the  affidavit/s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

A-iA-ls 


YOU  ARE  COMMANDED  to  execute  tins  warrant  on  or  before _ 

(not  to  exceed  14  days) 

sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  , 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  Warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

Unon  its  retain,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court.  - - 

- - - — - - - -  USMJMtials 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 

searched  or  seized  (check  the  appropriate  box)  Ofor  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ _ _ 

Date  and  time  issued:  M  - 

v  I  Judge  s  signature 


City  and  state:  Now  York.  NY 


Hon.  Henrv  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 

Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

-  "  Certification  

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  D 

I.  Premises  to  be  Searched— Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1728  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New 
York  10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject 
Premises-4  is  located  on  the  17th  floor  of  the  hotel. 


H— Items  to-Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  Rom  Subject  Premises-4  are  evidence;  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),'  1014  (false  statements  to  a  financial  institution),  1343  (wire  -fraud),  and  1344 
(bank  fraud),  ’and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

1  a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 

medallions,  from  January  1, 2013  to  the  present. 


b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  tc  and/ or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 


d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 


e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  puipose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 


f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  thiough 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
201 3  to  the  present. 


Cohen  and 


^vjdgno^jetoiri^^^^ereements,  loans,  and/or  financial  transactions  betwee^ 

and/or  entities  controlled  by 


2017.08.02 


13 


Case  l:18-cr-00602-WHP  Document  48-2  Filed  07/18/19  Page  186  of  201 


and  any  payments  by  to  Cohen,  from  J anuary 

JL3  /L,\J  X.J-*  LU  UW 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  lelated  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j_  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal.  . . _  .. . . . 

It.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 

p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1, 2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categolies 
set  forth  in  Section  H.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBoolc  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 


2017.08.02 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lien  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 


The  items  to  be  seized  fiom  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media;,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  uxformation. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices~or-storage-mediamincluding-  any~hardwaremr  software-manuals-  or  othei— information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

— 3, - Anyevidence  concerning  the  identities  oi'-locations  of  thosepersons  with  access  to,  _ 

control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  ofafile  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  m  order  to  deteimine 
then* *  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
n.A  and  ILB  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  fioin  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address-potentiahpiivileges. - ^ - —  — — - •- - : - ; - — - 
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IV.  Conclusion  and  Ancillary  Provisions 

73.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachments  A,  B,  C,  D,  E  and.F  to  this  affidavit  and  to  the 
Search  and  Seizure  Warrants. 

74.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  I  respectfully 
request  that  this  affidavit  and  all  papers  submitted  herewith  be  maintained  under  seal  until  the 
Court  orders  otherwise. 


Special  Agent 


FBI 


Sworn  to  before  me  on 


8th  day  of  April,  2018  /  V  ‘  *  ^ 


UNITED  STAGES  MAGISTRATE  IUDGE 
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United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628, 

New  York,  New  York  10065,  and  any  closed 
containers/items  contained  therein,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 


Case  No 


1 8  MAG  2968 


To:  Any  authorized  law  enforcement  officer 


An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )l 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized) : 


See  Attachment  A  .  ,  . 

I  find  that  the  affidavits),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 
property,  j 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  ;  ; 

(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court.  ,  ,  _ 

USMJ  Initials 

•  i  u  < 


□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Gfor  days  (not  to  exceed  30), 

□until,  the  facts  justifying,  the  later  specific  date  of  _ _ __ 


Date  and  time  issued:  { 

City  and  state:  New  York.  NY _ _ 


V 


Judge’s  signatur^ 

Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 


Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 

I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ _ 

Executing  officer ’s  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

H.  Items  to  Be  Seized 


A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§,  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfer  anv  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1, 
20 1 3  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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,  and  any  payments  by 

1,  2012  to  the  present. 

h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 

i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 

j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/orfD_ylan_..Ho_ward about.  Donald  Trump,  the.  TrumpXampaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 

m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


to  Cohen,  from  January 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the.identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case  No. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628,  ^ 

New  York,  New  York  10065,  and  any  closed  ' 

containers/items  contained  therein,  See  Attachment  A  ) 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)'. 

Loews  Regency  Hotel,  540  Park  Avenue,  Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630) 
(collectively,  “Room  1628”),  New  York,  New  York  10065,  and  any  closed  containers/items  contained  therein,  See 
Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 


property. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  M- 1  1 


(not  to  exceed  14  days) 

Sf  in  the  daytime  6:00  a.m.  to  10  p.m.  □  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  Court. 

□  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  of  the  Court. _ 

USMJ  Initials 

□  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C.  §  2705  (except  for  delay 

of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Cl  for  _ days  (not  to  exceed  30). 

□until,  the  facts  justifying,  the  later  specific  date  of  _ 


Date  and  time  issued:  ^  |S  ~7  1 6  j 

'<7 1 

1  \ 

Wo 

1  < 

5 

1 

|  Judge ’s  signature 

City  and  state :  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant 
to  the  Court. 


Date:  _  _ 

Executing  officer  ys  signature 


Printed  name  and  title 
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ATTACHMENT  A 

I.  Premises  to  be  Searched — Subject  Premises-4 

The  premises  to  be  searched  (“Subject  Premises-4”)  are  described  as  follows,  and  include 
electronic  devices,  and  all  locked  and  closed  containers  found  therein: 

Room  1628  (a  suite  encompassing  rooms  1628,  1629,  and  1630)  (collectively,  “Room 
1628”),  located  inside  the  Loews  Regency  Hotel  at  540  Park  Avenue,  New  York,  New  York 
10065.  The  building  is  a  luxury  hotel  located  on  Park  Avenue  and  61st  Street.  Subject  Premises- 
4  is  located  on  the  16th  floor  of  the  hotel. 

II.  Items  to  Be  Seized 

A.  Evidence,  Fruits,  and  Instrumentalities  of  the  Subject  Offenses 

The  items  to  be  seized  from  Subject  Premises-4  are  evidence,  fruits,  and  instrumentalities 
of  violations  of  18  U.S.C.  §§  371  (conspiracy,  as  it  pertains  to  the  other  Subject  Offenses),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud),  and  52  U.S.C.  §§  30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign 
contributions)  (the  “Subject  Offenses”),  described  as  follows: 

a.  Evidence  relating  to  Sterling  National  Bank,  Melrose  Credit  Union,  and/or  taxi 
medallions,  from  January  1,  2013  to  the  present. 

b.  Evidence  relating  to  a  plan,  proposal,  or  agreement  for  Michael  Cohen  and/or 

entities  associated  with  him  to  transfe^n^nterest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  md/or  entities  associated  with  him. 

c.  Evidence  relating  to  a  plan,  proposal,  or  agreement  to  modify  loans  that  Cohen  has 
with  Sterling  and/or  Melrose. 

d.  Evidence  relating  to  Essential  Consultants,  LLC,  including  any  documents  that 
indicate  the  nature  and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  the  nature 
of  any  work  done  by  Cohen  or  any  other  individuals  in  connection  with  Essential  Consultants. 

e.  Evidence  of  income  to  Michael  D.  Cohen  &  Associates,  including  any  documents 
that  indicate  the  nature  and  purpose  of  payments  made  to  or  from  Michael  D.  Cohen  &  Associates, 
or  evidence  of  the  purpose  of  accounts  opened  in  the  name  of  Michael  D.  Cohen  &  Associates. 

f.  Evidence  relating  to  Cohen’s  net  worth,  available  cash  and  cash  equivalents, 
monthly  and  annual  income,  income  sources,  and  other  assets,  whether  held  personally  or  through 
entities,  including  tax  returns,  personal  financial  statements,  and  bank  records,  from  January  1 , 
2013  to  the  present. 

g.  Evidence  relating  to  agreements,  loans,  and/or  financial  transactions  between 

Cohen  and  and/or  entities  controlled  by 
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1,  2012  to  the  present. 


and  any  payments  by 


:o  Cohen,  from  January 


h.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related  documents, 
and  any  communications  related  to  such  agreements. 


i.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal,  or 
payments  to  Stephanie  Clifford  or  Karen  McDougal. 


j.  Evidence  of  communications  between  Michael  Cohen  and  American  Media,  Inc., 
David  Pecker,  and/or  Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie 
Clifford,  and/or  Karen  McDougal. 

k.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 

l.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape  and  other  potential  sources  of  negative 
publicity  involving  Trump’s  relationship  in  the  run  up  to  the  election. 


m.  Evidence  relating  to  any  reimbursement  or  other  promises  made  to  Cohen  for 
payment  to  Clifford  or  others  in  connection  with  the  election. 

n.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 


o.  Communications  with  others,  including  Jeffrey  Getzel  and/or  other  accountants, 
relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances,  from  January  1,  2013  to  the 
present. 


p.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  related  to  the  intended  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution,  from  January  1,  2013  to  the  present. 

q.  Evidence  of  Cohen’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

B.  Search  and  Seizure  of  Electronically  Stored  Information 

The  items  to  be  seized  from  Subject  Premises-4  also  include  any  computer  devices  and 
storage  media  that  may  contain  any  electronically  stored  information  falling  within  the  categories 
set  forth  in  Section  II.A  of  this  Attachment  above,  including,  but  not  limited  to,  a  MacBook  Pro, 
any  other  desktop  and  laptop  computers,  any  Apple  iPhone  or  other  cellphone  or  smartphone 
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belonging  to  Michael  Cohen  or  in  his  possession,  an  Apple  iPad  Mini,  portable  hard  drives,  disk 
drives,  thumb  drives,  and  personal  digital  assistants.  In  lieu  of  seizing  any  such  computer  devices 
or  storage  media,  this  warrant  also  authorizes  the  copying  of  such  devices  or  media  for  later  review. 

The  items  to  be  seized  from  Subject  Premises-4  also  include: 

1.  Any  items  or  records  needed  to  access  the  data  stored  on  any  seized  or  copied 
computer  devices  or  storage  media,  including  but  not  limited  to  any  physical  keys,  encryption 
devices,  or  records  of  login  credentials,  passwords,  private  encryption  keys,  or  similar  information. 

2.  Any  items  or  records  that  may  facilitate  a  forensic  examination  of  the  computer 
devices  or  storage  media,  including  any  hardware  or  software  manuals  or  other  information 
concerning  the  configuration  of  the  seized  or  copied  computer  devices  or  storage  media. 

3.  Any  evidence  concerning  the. identities  or  locations  of  those  persons  with  access  to, 
control  over,  or  ownership  of  the  seized  or  copied  computer  devices  or  storage  media. 

C.  Review  of  ESI 

Following  seizure  of  any  computer  devices  and  storage  media  and/or  the  creation  of 
forensic  image  copies,  law  enforcement  personnel  (which  may  include,  in  addition  to  law 
enforcement  officers  and  agents,  attorneys  for  the  government,  attorney  support  staff,  agency 
personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts  under 
government  control)  are  authorized  to  review  the  ESI  contained  therein  for  information  responsive 
to  the  warrant. 

In  conducting  this  review,  law  enforcement  personnel  may  use  various  techniques  to  locate 
information  responsive  to  the  warrant,  including,  for  example: 

•  surveying  various  file  “directories”  and  the  individual  files  they  contain  (analogous  to 
looking  at  the  outside  of  a  file  cabinet  for  the  markings  it  contains  and  opening  a  drawer 
believed  to  contain  pertinent  files); 

•  opening  or  cursorily  reading  the  first  few  “pages”  of  such  files  in  order  to  determine 
their  precise  contents; 

•  scanning  storage  areas  to  discover  and  possibly  recover  recently  deleted  files  or 
deliberately  hidden  files; 

•  performing  key  word  searches  through  all  electronic  storage  areas  to  determine  whether 
occurrences  of  language  contained  in  such  storage  areas  exist  that  are  intimately  related 
to  the  subject  matter  of  the  investigation;  and 

•  reviewing  metadata,  system  information,  configuration  files,  registry  data,  and  any 
other  information  reflecting  how,  when,  and  by  whom  the  computer  was  used. 
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Law  enforcement  personnel  will  make  reasonable  efforts  to  search  only  for  files, 
documents,  or  other  electronically  stored  information  within  the  categories  identified  in  Sections 
II.  A  and  II.B  of  this  Attachment.  However,  law  enforcement  personnel  are  authorized  to  conduct 
a  complete  review  of  all  the  ESI  from  seized  devices  or  storage  media  if  necessary  to  evaluate  its 
contents  and  to  locate  all  data  responsive  to  the  warrant. 

Additionally,  review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to 
address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
l^oma^cnrn, 


Maintained  at 
Premises  Controlled  by  Google,  Inc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


TO  BE  FILED  UNDER  SEAL 
AGENT  AFFIDAVIT 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK 
COUNTY  OF  NEW  YORK 


) 

)  ss. 
) 


Special  Agent 


of  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  Raining  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 


@gmail.com  (the  “Cohen  Account”), 


|i>gmail.com  (the  “ 
Account”),  and 
“Subject  Accounts”).  The  Cohen  Account, 


Account”), 
l@aol.com  (the 


(the  “MDCPC 

H  (the 

Account”)  (collectively,  the 
4ccount,  and 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  T  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbroolc, 
Pennsylvania  19087  (“1  &  1”),  and  th  \ccount  is  maintained  and  controlled  by  Oath,  Inc., 

22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  knowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  name  1  &  1  enables  the  subscriber  to  host  any 

email  address  under  this  domain  name  on  servers  operated  by  1  &  1.  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  connected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  (i.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

v.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  fdes  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchat”  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
other  in  real  time.  Oath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

E.  Prior  Applications 

8.  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  US  AO,  which  is  working  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege. 1  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


1  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 


02.28.2018 


6 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  7  of  67 


responsive  materials  produced  pursuant  to  the  July  18  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 2017,  and  January  4, 2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 
This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7, 2017  and  January  4,  2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

II.  Probable  Cause 

A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party,  I 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  making  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 


communicate  with 


and  their  attorney. 


about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  banks.  Additionally,  -ised  the 

Account,  ,|  Account  and  ^^Account,  respectively,  to  communicate  with  Cohen 

about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by 
Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee- 1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).2  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


2  One  of  these  companies.  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee- 1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,  taxi  medallion  loans — like  the  loans  held 
by  Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total,  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.3  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000.4  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — who  was  the  direct  obligor  under  the  guarantee  agreements — was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  overtime,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 

3  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

4  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  in  sum  and  substance,  about  his  cash  flow  problems  and  a  monthly  shortfall  of 
approximately  $16,000.  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicatefd]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by, 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with 

—Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,  J  emailed  Sterling 

Employee-1  from  the  J  Account  to  inquire  about  the  status  of  the  transaction. 

Sterling  Employee- 1  responded  to  at  the  Account  that 

Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending  |  a  term  sheet 

shortly. 

i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 20 1 6,  a  Sterling  employee  emailed 
the  Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 

proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 
from  responded  from  the  Account,  copying 

it  the  Account,  that  he  would  send  a  financial  statement  and  tax 

returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee-1, 1  have  learned  that  Sterling  Employee-1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employee-1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 

Account  and  .  at  the  ^^^^Account,  attaching  a  non-binding  term 

sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 

On  or  about  August  29,  2017,  emailed  Sterling  Employee-1  from  the 
Account,  requesting  that  he  be  included  on  “all  future  e-mails  to  J  and/or 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed  at  the 

Account,  Cohen  at  the  Cohen  Account,  and  at  the  Account,  and  provided  them  with  a 
revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent 
at  the  Account,  Cohen  at  the  Cohen  Account,  and  it  the  ^^Jkccount  a 

copy  of  the  executed  term  sheet.  According  to  the  term  sheet,  would  borrow 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  was  to 

acquire  from  Cohen. 

l.  As  part  of  the  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  transaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and  j  for  its  credit 

underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017,  ;  | 
sent  from  the  .  Account  to  a  Sterling  employee  a  copy  of  f 

|  personal  financial  statement.  The  financial  statement  lists  the| 

Account  as  the  email  contact  for  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statement”). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 5 
$3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  intrust).  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some" of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 

5  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  which  was  considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-  term  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  under-writing  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-'  transaction  was  favorable  for  the  bank 

-  that  is,  that  would  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loans  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen- transaction,  Cohen  would  “bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen- 
provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen- 


attomey,  emailed  attorneys  for  Sterling  from  the  Account 

and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 
review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  deal  fell  apart, 

Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 


transaction,  however,  did  not  close.  On  or  about  January 


transaction.  Sterling 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $  1 ,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 

s.  On  or  about  February  1,2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[p]ayment  of  $  1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $ 1.250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose6)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“First  Republic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


6  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melrose  so  that 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen- 
transaction.  Based  on  my  review  of  reports  of  interviews  wid^^^j^^employees,  i  also  Know 
that  Cohen  called  employees  at  Melrose  regarding  the  Cohen  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions7  about  the  puipose  of  the  account — the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form8 — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  puipose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — which  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


7  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

8  First  Republic  Employee- 1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  9  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13, 2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,  I  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  3 1,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


9  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Begimring  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10,  2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31,  2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 
Cohen  was  the  only  authorized  signatory  on  the  account.  Among  other  things,  the  MDC&A 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.10  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


10  Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisoiy  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel,  and  my  review  of  notes  and  a  I 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[ajttached  is  a  draft  of  the  new  PFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  statement  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [j/c]  and  Essential  Consultants  LLC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone — which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 20 1 7,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[l]ooks  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.18  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30,  2017,  Cohen  had  at  least  $5,014,051 .80  in  his  accounts 
at  Capital  One  Bank,  Signature  Bank,  TD  Bank,  Bethpage  Credit  Union,  First  Republic,  and 
Morgan  Stanley. 

21 .  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  ioans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


it  appears  that 


agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


approximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 

Employee-1  to  Cohen  and  See  supra  $  14(k).  According  to  the  term  sheet,  I 

|  would  borrow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions 
that  was  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 

the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  or  any  other  form  of  payment  or 

financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 

describing  the  terms  of  the  Cohen-  transaction  and  the  new  loan  tc  jdid 

not  mention  any  payments  from  Cohen  to  |  including  a  $3.8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee- 1  and  Sterling  Employee-2,  they  were  never  told  that  agreed  to  a  purchase 

price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to  I 
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23.  While  Cohen  and  j  did  not  disclose  any  payment  from  Cohen  to 

n  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to| 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  “Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 

in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800, 000.”11 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  pay  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $  1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  was  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 


11  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
to  In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 

Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
undisclosed  side-payment  with  at  the  Account,  i|f._ 

at  the  i  Account,  and  j  at  the  Account.  Specifically, 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen-  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  $ 14(g),  to  send  term  sheets  to  Sterling,  see  supra  If 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  $ 
16,  to  send  financial  statements  to  Sterling,  see  supra  $  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  U  14(n),  to  negotiate  a  reduction  of  his  debt  with 

.  Sterling  on  or  around  January  31,  2018,  see  supra  f  14(o),  to  tell  Sterling  on  February  1, 2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  $  14(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  $ 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b.  has  used  the  Account  to  communicate  about 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  Tf  14(g).12  Specifically,  as  described  above,  as  early  as  May  2,  2017, 
lused  the  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  If  14(h).  He  used  the  4ccount  to  exchange  drafts  of  the  proposed  term 

sheet  with  Cohen,  and  Sterling,  see  supra  1;  14(j).  The  Account  was  also 

used  by  to  send  a  personal  financial  statement  for  Tjto  Sterling, 

see  supra  ^  14(1).  The  Account  was  copied  on  emails  from  the 

Account  about  the  transaction,  see  supra  ^  14(i),  and  was  listed  on  financial 

statement  as  the  contact  email  for  see  supra  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1,  2017 — at  or  around 
the  time  the  md  Cohen  were  negotiating  a  term  sheet—  ased  the 

|Account  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 
|has  used  the  Account  to  communicate  with  Sterling  employees,  Cohen, 

and  j  about  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 

See  supra  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,  told  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  ^  14(j). 
Additionally,  |  was  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 
Sterling  on  January  29, 20 1 8  that  would  not  go  forward  with  the  planned  transaction, 

see  supra  ^  14(j),  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  to|  md  the  reasons  for  the  collapse  of  the  Cohen-  transaction. 


12  For  instance,  from  records  provided  by  Sterling,  I  know  that  op  or  about  December  2, 
2016  sent  an  email  to  a  Sterling  employee  using  the 

Account.  The  email  forwarded  correspondence  betweerj^jwho  was  using  the 
Account,  and  an  employee  of  Capital  One  regarding  extending  |  loan  with 

Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
contact  and  communications.”  The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address. 13 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 

pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  the  Account,  and  to  send  and  receive  emails  from  other  email  accounts 

about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
were  communicating  about  a  term  sheet  for  the  Cohen-  taxi 


13  Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  If  27. 
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medallion  transaction,  see  supra  If  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  from  it  the  Account.  For  instance,  on  or  about  August  22,  2017,  ^^|used 

the  Account  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 

MDCPC  Account.  On  the  same  day,  Sterling  Employee- 1  responded  to  at  the  Recount 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee- 1. 

b.  As  noted  above,  on  or  about  September  1,  2017,  Cohen  used  the  MDCPC  Account 

to  send  or  receive  eight  emails  with  the  Account. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  Tflf  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  fflf  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Information,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  apolitical  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15,201 7,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra  f 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the  . 

Account,  the  Account,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the  Account  on  or  about  December  1 8, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3, 2018  at2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  the  ^Account  on  or  about 

January  25,  2018  at  8:55  p.m. 


02.28.2018 


36 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  37  of  67 


on  or 


c.  Emails  from  the  Cohen  Account  to  the  email  account 

about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
emails  contained  in  the  Cohen  Account,  I  have  learned  that  the  email  account 

belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d.  Emails  from  the  Cohen  Account  to  email  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 
clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  Numerous  emails  sent  horn  the  Cohen  Account  to  the  email  account 

including  emails  on  or  about  December  4, 2017  at  2: 17  p.m.  and  January  29, 
2018  at  5:43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

,  f  believe  that  the  email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  1  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-  transaction. 

Based  on  my  training  and  experience,  1  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the  Subject  Offenses. 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 
with  |  ,  and  primarily  through  the  Cohen  Account  and 

MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  the  |  Account,  Account  and  Account  since  on  or 

about  October  1,  2016 — the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
described  above — such  as  -of  his  misstatements  and 

omissions  to  financial  institutions. 
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31.  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14,  2017. 

c.  For  the  Account  and .  Account,  this  application 

seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
2016  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with  the 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which 
began  representing  the  n  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 

39 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to  jand/or  entities 

associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him; 

f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  it 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Account  and 

I  Account  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  the  person(s)  who  created  or  used  the  Account  and 

Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the  Account  anc  jAccount  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
md/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 
institution(s),  regarding  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and 

j  i  Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 
of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  the  Account  and  |  Account 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the  Account  will  contain  evidence, 

fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the^^H  Account; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Account  about  any  matters  relating  to  any  plan  or  proposal  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and  others,  including  employees  or 

representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

ILL  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  wanant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  and  re  attorneys,  the  review  of  the  content  within  the  Subject 

Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuantto  18U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 


V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 


28th  day  of  February,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
naintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  |  maintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Iss"^ 


-Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
'the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 

agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the 
person(s)  -  who  communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential 
Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/ or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


and/or  entities  associated  with  him; 


02.28.2018 


3 


Case  l:18-cr-00602-WHP  Document  48-3  Filed  07/18/19  Page  52  of  67 


IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
fljgmail.com,  . 
|ggmail.com,  and 

Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  |af  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  7lgmail.com,  glgmail.com,  and 

maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 

\  \  C  l  i  )  t  I  )  f  t 


{Jr  ffir  ^  /  S 

Date  Issued 


OR  A  RLE  GAB  R-ffi-f: W .  G0RENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
qigmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

IL  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  1 4, 20 1 7  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

HI.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts^  glgmail.com  and  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §  §  37 1  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  nd/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  nd/or  entities  associated 

with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution^), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 


Asgnriated  with  the  Email  Account 
glaol.com,  Maintained  at 
Premises  Controlled  by  Oath,  Inc., 
USAO  Reference  No.  20 1 8R00 127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  §}aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York  ^  \  >.  u  >  >  i  >  i , , 


Date  Issued 


10 'Af* 


Time  Issued 


HpNORABIJE  QABRfiSW.  GORENSTEIN 
rtiief  hJnited  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  C 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account  @aol .com  (the  “Subject 

Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 

g.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracyto  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  md/or  entities  associated 

with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

d.  Communications  between  the  Subject  Account  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  See  Attachment  A 


APPLICATION  FOR  A  SEARCH  WARRANT 

I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 

^i^fi^fce-tEfoffialnfn^  - . 


located  in  the  _ Southern _  District  of  New  York _ ,  there  is  now  concealed  (identify  the 

person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


The  basis  for  the  search  underFed.  R.  Crim.  P.  41(c)  is  (check  one  or  more): 

^  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 


The  search  is  related  to  a  violation  of: 

Code  Section  Offense  Description 

18  USC  371,  1005,  1014,  Conspiracy  to  defraud  the  United  States;  false  bank  entries;  false  statements  to  a 

1343,  1344  financial  Institution;  wire  fraud;  bank  fraud 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 


[?f  Continued  on  the  attached  sheet. 

Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days:  _ 
under  18  U.S.C.  §  3 103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet. 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 


Date 


City  and  state:  iv y 


Hon.  Gabriel  W.  Gorenstein,  U.S.  Magistrate  Judge 

Printed  name  and  title 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  A 
Device  Containing  the  Results  of  Three  Email 
Search  Warrants,  USAO  Reference  No 
2018R00127 


Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


TO  BE  FILED  UNDER  SEAL 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 


Special  Agent 


of  the  United  States  Attorney’s  Office  for  the  Southern 


District  of  New  York,  being  duly  sworn,  deposes  and  says: 


I.  Introduction 


A.  Affiant 


1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August 
2016.  I  previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  4 1  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  device  specified  below  (the 
“Subject  Device”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is  based 
upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my  conversations  with 
other  law  enforcement  personnel;  and  my  training,  experience  and  advice  received  concerning  the 
use  of  computers  in  criminal  activity  and  the  forensic  analysis  of  electronically  stored  information 
(“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited  purpose  of  establishing  probable 
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cause,  it  does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  my  investigation. 
Where  the  contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are 
reported  herein,  they  are  reported  in  substance  and  in  part,  except  where  otherwise  indicated. 

B.  Prior  Warrants  and  the  Subject  Device 

3.  As  set  forth  in  detail  below,  the  US  AO  and  the  Federal  Bureau  of  Investigation 
(“FBI”)  are  investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

4.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  (collectively,  the 
“SCO  Warrants”)  for  emails  and  other  content  information  associated  with  two  email  accounts 
used  by  Cohen.  Specifically: 


On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


a. 


emails  in  the  account 


fegmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 


between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 


b.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 


November  13, 2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 


c. 


On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 


warrant  for  emails  in  the  account 


|the  “Cohen  MDCPC  Account”)  sent  or 
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received  between  the  opening  of  the  Cohen  MDCPC  Account1  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  SCO  Warrants.  A  filter  team  working  with  the  SCO 
had  previously  reviewed  the  e-mails  produced  pursuant  to  the  SCO  Warrants  for  privilege. 

6.  These  emails  are  contained  on  the  Subject  Device,  which  is  particularly  described 
as  a  black  and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.”  That  is, 
the  Subject  Device  contains  the  emails  and  other  content  information  obtained  pursuant  to  the  SCO 
Warrants,  less  any  emails  that  were  screened  and  removed  by  the  SCO’s  privilege  team. 

7.  The  Subject  Device  is  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

8.  The  affidavits  in  support  of  the  SCO  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 
institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
LLC  and  the  nature  of  funds  flowing  into  that  account,  and  activities  undertaken  by  Cohen  on 
behalf  of  certain  foreign  persons  or  foreign  entities  without  having  registered  as  a  foreign  agent. 
The  SCO  Warrants  accordingly  define  the  evidence  to  be  seized  by  reference  to  subject  offenses 

1  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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and  specific  categories  of  information  related  to  these  courses  of  conduct.  The  subject  offenses  in 


the  SCO  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

Subject  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1956  (money 
laundering),  95 1  (acting  as  an  unregistered  foreign  agent),  and  22  U.S.C. 
§§611  etseq.  (Foreign  Agents  Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and 22  U.S.C.  §§611  etseq .  (FARA) 

c 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

9.  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  i  have 
learned  of  additional  conduct  by  Cohen,  described  below,  which  was  not  described  in  the  affidavit 
seeking  the  First  Cohen  Gmail  Warrant  and  was  described  briefly  in  the  affidavits  seeking  the 
Second  Cohen  Gmail  Warrant  and  the  Cohen  MDCPC  Warrant.2 

10.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  non-privileged  e- 
mails  obtained  pursuant  to  the  SCO  Warrants,  as  contained  on  the  Subject  Device,  for  evidence 
related  to  this  additional  conduct.  As  set  forth  below,  in  addition  to  the  categories  of  evidence 
already  described  in  the  SCO  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Device 
contains  evidence  of  violations  ofl8U.S.C.  §371  (conspiracy  to  defraud  the  United  States),  1005 
(false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire  fraud),  and  1344 
(bank  fraud)  (collectively,  the  “Subject  Offenses”),  related  to  the  additional  conduct  described 
below.3 


2  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant  to  the  SCO  Warrants. 

3  The  SCO  Warrants  cite  many  of  the  same  statutes  as  subject  offenses  and  describe  categories  of 
information  that  likely  encompass  evidence  of  the  additional  conduct  described  herein. 
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II.  Probable  Cause  Regarding  the  Subject  Offenses 

1 1 .  Together  with  this  application,  I  am  submitting  an  application  for  a  search 
warrant,  pursuant  to  18  U.S.C.  §  2703,  for  all  content  and  other  information  associated  with  (a) 
the  Cohen  Gmail  Account,  for  the  time  period  November  14,  2017  to  the  present;  (b)  the  Cohen 
MDCPC  Account,  for  the  time  period  November  14,  2017  to  the  present;  and  (c)  three  other 
email  accounts.  The  affidavit  in  support  of  this  application  is  attached  as  Exhibit  D  (the 
“Accompanying  Affidavit”),  and  is  incorporated  by  reference  as  if  fully  set  forth  herein. 

12.  As  set  forth  in  the  Accompanying  Affidavit,  there  is  probable  cause  to  believe  that 

Cohen  has  made  affirmative  misrepresentations  in  and  omitted  material  information  from  financial 
statements  and  other  disclosures  that  Cohen  provided  to  multiple  banks  in  connection  with  a 
transaction  intended  to  relieve  Cohen  of  approximately  $22  million  in  debt  he  owed  on  taxi 
medallion  loans  from  the  banks.  As  set  forth  in  detail  in  the  Accompanying  Affidavit,  in  these 
financial  statements,  and  in  his  oral  and  other  written  statements  to  these  banks,  Cohen  appears  to 
have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017  from  new  consulting 
work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash  equivalents;  and  (iii)  failed 
to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had  agreed  to  make  a  $3.8 
million  cash  payment  to  a  third  party,  ,  in  connection  with 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these  misrepresentations  and 
material  omissions,  Cohen  avoided  making  monthly  payments  on  his  loans,  and  attempted  to  and 
has  secured  proposed  agreements  from  the  banks  to  relieve  him  of  certain  repayment  obligations 
worth  millions  of  dollars. 


Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit  authorization  to  search  the  Subject 
Device  for  evidence  of  this  additional  conduct. 
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13.  As  noted  above,  the  Accompanying  Affidavit  seeks  email  content  for  the  Cohen 
Gmail  Account  and  the  Cohen  MDCPC  Account  for  the  period  from  November  14,  2017  to  the 
present,  and  therefore  establishes  probable  cause  that  a  search  of  the  email  content  from  that  time 
period  will  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses.  As  set  forth 
below,  the  Accompanying  Affidavit  also  establishes  probable  cause  to  believe  that  a  search  of 
the  Subject  Device  (i.  e. ,  the  non-privileged  emails  from  the  earlier  time  periods  covered  by  the 
SCO  Warrants)  will  similarly  reveal  evidence,  fruits,  and  instrumentalities  of  the  Subject 
Offenses.4  For  example,  as  described  in  the  Accompanying  Affidavit: 

a.  In  or  about  December  2014,  Sterling  National  Bank  (“Sterling”)  agreed  to 
lend  approximately  $22  million  to  Cohen’s  medallion  companies.  See  Accompanying  Affidavit 
1 14(c). 


b.  In  or  about  September  20 1 5,  Cohen  began  pushing  Sterling  for  a  reduction 
in  his  monthly  payments.  See  id.  $  14(e). 

c.  In  or  about  October  20 1 6,  Cohen  told  a  Sterling  employee  (“Sterling 

3,  who 


Employee-1”)  that  he  had  a  potential  buyer  of  his  taxi  medallions,  named 
would  agree  to  assume  Cohen’s  debt  with  Sterling  (and  Melrose  Credit  Union,  the  participating 
bank).  See  id.  $  14(g).  Negotiations  of  the  potential  taxi  medallion  transaction  then  followed  for 
more  than  a  year.  See  id.  $$  14(g)-(q). 


| 


4  As  noted,  the  Subject  Device  contains  email  content  for  the  Cohen  Gmail  Account  from  the 
period  of  June  1,  2015  to  November  13, 2017,  and  email  content  for  the  Cohen  MDCPC  Account 
for  the  period  of  March  2017  to  November  13,  2017. 
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d.  On  or  about  February  22,  2017,  the  Cohen  Gmail  Account5  sent  an  email  to 
a  Sterling  employee  (“Sterling  Employee-2”)  stating  that  he  “agreed  to  pay  down  1  million  from 
the  loan  amount.”  See  id.  If  14(g). 

e.  On  or  about  June  8, 2017,  Cohen  emailed  Sterling  Employee-1  from  the 
Cohen  Gmail  Account,  attaching  a  Sterling  personal  financial  statement  form  that  had  been  filled 
out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 2017  (the  “May 
2017  Financial  Statement”),  that  was  also  attached.  See  id.  14(i). 

f.  On  or  about  October  5, 2017,  Cohen,  using  the  Cohen  Gmail  Account,  re¬ 
sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial  Statement.  A  day  later,  on  October  6, 
2017,  Cohen,  using  the  Cohen  Gmail  Account,  emailed  Sterling  Employee-2  a  statement  of 
financial  condition,  dated  September  30, 2017  (the  “September  2017  Financial  Statement”).  See 
id.  Tf  14(m).  The  September  2017  Financial  Statement  omitted  assets  that  Cohen  held  in  certain 
bank  accounts  and  substantially  understated  his  available  cash  and  cash  equivalents.  See  id. 
19-20. 

g.  It  appears  that  Cohen  set  up  the  Cohen  MDCPC  Account  to  receive  emails 
he  was  previously  receiving  at  the  Cohen  Gmail  Account.  On  or  about  May  5, 2017,  Cohen  sent 
an  email  from  the  Cohen  MDCPC  Account  to  a  blind  copy  list  of  recipients,  stating  that  “[d]ue  to 
the  overwhelming  volume  of  phone  calls  and  emails  coming  into  my  previous  cellular  number 
and  e-mail  address,  I  have  elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new 


5  As  noted  in  n.2,  supra ,  I  do  not  base  this  application  on  my  review  of  emails  obtained  pursuant 
to  the  SCO  Warrants.  Where  the  content  of  emails  sent  from  or  received  by  the  Cohen  Gmail 
Account  and/or  the  Cohen  MDPC  Account  are  described  herein,  my  description  is  based  on  copies 
of  these  emails  produced  by  third  parties  pursuant  to  subpoena  or  otherwise. 
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information  for  all  future  contact  and  communications.”  The  signature  line  on  the  email  listed 
the  Cohen  MDCPC  Account  as  the  new  email  address.  See  id.  26. 

h.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 
learned  that,  on  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 

,  and  were  communicating  about  a  term  sheet  for  the 

Cohen-  taxi  medallion  transaction,  the  Cohen  MDCPC  Account  sent  or  received 

emails  from  '  ,  including  emails  on  which  Sterling  employees  were  copied.  On  or  about 

August  22,  2017,  Cohen  also  used  the  Cohen  MDCPC  Account  to  send  an  email  to  Sterling 
Employee- 1.  See  id.  K  27(a). 

i.  Based  on  my  review  of  header  information  obtained  by  court  order,  I  have 

learned  that  on  or  about  September  1,  2017 — at  or  around  the  time  the  and  Cohen 

were  negotiating  a  term  sheet- — the  Cohen  MDCPC  Account  sent  or  received  eight  emails  to  or 
from:  .  See  id.  25(b). 

14.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Device 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling, 
Melrose,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan, 

proposal,  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  ~J|  and/or 

entities  associated  with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish 
the  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  - 
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who  communicated  with  the  Cohen  Gmail  Account  and/or  the  Cohen  MDCPC  Account  about  any 
plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest 
in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Cohen  Gmail  Account  and/or  the  Cohen 
MDCPC  Account  and  Jeffrey  Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or 
finances; 

e.  Evidence  indicating  the  Cohen  Gmail  Account  and  the  Cohen  MDCPC 
Account  owner’s  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

III.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

15.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Device  for  information 
responsive  to  the  warrant. 

1 6.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  contained  on  the  Subject  Device.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
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searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

17.  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

18.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


4  \  *  ,f  ''  /  | 

Sworn  to  before  me  on  i  /  r].-  > 
28th  day  of  Febiuary,  2018  . 


i  \  \ 


li 
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Attachment  A 

I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #:  1 80208140208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17~mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  ol  the  ESl-and  the  status  of-the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  ofl8U.S.C.  §371  (conspiracy  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 

person(s)  —  who  communicated  with  gmail.com  and/or 

“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


and/or  entities  associated  with  him; 


d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 


Michael  D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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e. 


Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 


Subject  Offenses  under  investigation. 
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Exhibit  A 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


file 


J ML  24  rn 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ARSOOIATFn  WITH  THE  EMAIL  ) 

ACCOUNT  @GMAIL.COM  ) 


) 


,-asei  1;17~nni  00503 
.ssigned  To  :  Howell,  Beryl  A. 
lSsian  Date '.7/18/2017 

Rftl7.Ll 


SEARCH  AND  SEIZURE  WARRANT 


Tot  Any  authorized  law  enforcement  officer .  '  ~  . 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )l 


■ 


See  Attachment  A. 


I  find  that  the  affidavits)*  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  _ August  1 , 2017  _ (not  to  exceed  14  days) 

$  in  the  daytime  6;00  a.m,  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventoiy  to  _ _ Hon,  Beryl  A.  Howell  _  . 

(United  States  Magistrate  Judge) 

O  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

O  for _ days  (not  to  exceed  SO)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _  _  . 


Date  and  time  issued; 


Judge ’s  signature 


City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 
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AO  93  (Rev  11/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

-yjib/'^on  WA&m 

Copy  of  warrant  and  inventory  left  with; 

17 -A«  \  +0&S&& 

G-oo^Cl_  r Si®'-? 

Inventory  made  in  the  presence  of: 

.  C'  u  '  !tr 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


DrjiM  /its-  I  isffoff 

1 1 S'o&ey -  ^oiyoyiq-  j 

l,r/ 


FILED 

JUL  2 1  2017 

Clerk  u.S.  District  and 
Bankruptcy  Courts 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 

Dale;  7/4?/4^>/7 


J 
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| 

■  ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1 600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 


I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
aecounfeorfidentifier-listed-imAttachmentrAt  _ — - _ -------  _ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
•session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  61 1 
et  seq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

:r=r— prj-j^jpaJgj  ‘  1  ----- 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

WITH  THE  EMAIL 
gGMAIL.COM 


SEARCH  AND  SEIZURE  WARRANT 

ToC  ~ AlnyTuthor  ized  law^nforc^enFSHic^ . ~~  ~~  ~  .  : 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )', 


'INFORMATIOflASgQCl^EEEl 

ACCOUNT 


) 

)  Case:  1:1 7-mj-00855 

\  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
'  Assign.  Date  :  11/13/2017 

i  Description:  Search  and  Seizure  Warrant 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized)'. 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  2'0,  2017  (not  to  exceed  14  days) 
ill  the  daytime  6;G0  a.m.  to  10:00  pan.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken, 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  Inventory  to  _ _ Hon.  Beryl  A.  Howell _ * 

(United  States  Magistrate  Judge) 

□  Pursuant  to  1 8  U.SU.  §  3 1 03  a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S.G. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

O  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ . 

Judge 's  signature 

Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Date  and  time 


issued:  ////d/ <3 (T 


City,  and  state: 


Washington,  DC 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date:  _  _ 

Executing  officer 's  signature 


Printed  name  and  'title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  of  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A:  

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  arid 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers.,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a. login  IP  address  or  browser  cookie  with 
the  accounts; 

L  All  cookies*  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

IL  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C,  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  on  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  Foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 

ggographic“andehronblbgiMl"contexfbfaccbunf  accessfuse,  andeventsrelatihg 

to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  tire  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of;  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 

III.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  Concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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AG  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

) 

)  Case:  1:17-mj-00854 
)  Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
)  Assign.  Date  :  11/13/2017 
)  Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )l 

See  Attachment  A. 


tn  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be.searched 
Or  identify  the  person  by  name  and  address) 

IW^RM^rTO^SSnulATED  WITH  THE  ACCOUNT 

WHICH  IS  STORED  AT  THE 
PREMISES  OF  T&1  INTERNET,  INC. 


I  find  that  the  affi  davit  (s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized )\ 

See  Attachment  Eh 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  20,  2Q17  (no\  to  exceed  14  days) 
$  in  the  daytime  6:Q0  a.m.  to  10:00  p.m.  D  at  any  time  in  the  day  or  night  because  good  cause  has  been  established 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
a$  required  by  law  and  promptly  return  this  warrant  and  inventory  to  Hon.  Beryl  A.  Howell _ _ _ , 

(United  State's  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3103a(b),  1  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

til  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _  , 


Date  and  time  issued: 


City  and  state: 


Judge  *s  signature 

Hon.  Beryl  A:  Howell,  Chief  U.S,  District  Judge 
Printed  name  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  entail  |  |  that 

is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  (“l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I,  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  l&l  (hereinafter  “the  Provider”),  regardless  of  whether  Such  information 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any  emails, 
records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  AH  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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All  search  history  or  web  history; 

All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

All  usernames  associated  with  or  sharing  a  iogin  IP  address  or  browser  cookie  with 
the  accounts; 

All  cookies,  including  third-party  cookies,  associated  with  the  user; 

All  records  that  are  associated  with  tire  machine  cookies  associated  with  the  user; 
and 

All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II,  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),.!  8  U.S.C.  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign.  Agents  Registration  Act  ("FARA”),  22  U.S.C,  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 


f. 

g- 

h. 

i. 

j- 

k. 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chrono  logical  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  •  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 

III.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
^^^^^^^ith  the  Email  Accounts 
gigmail.com, 

TO  BE  FILED  UNDER  SEAL 

AGENT  AFFIDAVIT 

Maintained  at 

Premises  Controlled  by  Google,  Inc., 
the  Email  Account 

Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the-Email  Account 

maintained  at 

Premises  Controlled  by  1  &  1  Internet, 

Inc.,  USAO  Reference  No. 

2018R00127 

Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent  j  pif  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states: 

I.  Introduction 
A.  Affiant 

1.  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  US  AO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  including  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 
l@gmail.com  (the  “Cohen  Account”),  (the  “MDCPC 

Account”)v^^^B@gmail.com  (the  I  Account”).  (the 


Account”),  and 


“Subject  Accounts”).  The  Cohen  Account, 


Account”)  (collectively,  the 
Account,  anc 


Account  are  maintained  and  controlled  by  Google,  Inc.,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1  Internet,  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  the  Account  is  maintained  and  controlled  by  Oath,  Inc., 
22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  “Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  C  and  D  to  the 
proposed  warrants. 

3.  As  detailed  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  knowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 


02.28.2018 
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my  training  and  experience  concerning  the  use  of  email  in  criminal  activity.  Because  this  affidavit 
is  being  submitted  for  the  limited  purpose  of  establishing  probable  cause,  it  does  not  include  all 
the  facts  I  have  learned  during  my  investigation.  Where  the  contents  of  documents  and  the  actions, 
statements,  and  conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in 
part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 

4.  I  have  learned  the  following  about  the  Providers: 

a.  The  Providers  offer  email  services  to  the  public.  In  particular,  Google  permits 

subscribers  to  maintain  email  accounts  under  the  domain  name  gmail.com.  Google  also  allows  a 
subscriber  to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For 
example,  if  a  subscriber  controls  the  domain  name  Google  enables  the  subscriber 

to  host  any  email  address  under  this  domain  name  on  servers  operated  by  Google.  Oath  permits 
subscribers  to  maintain  email  accounts  under  the  domain  name  aol.com.  1  &  1  permits  subscribers 
to  maintain  email  accounts  under  any  domain  name  under  the  subscriber’s  control.  For  example, 
if  a  subscriber  controls  the  domain  name  '  1  &  1  enables  the  subscriber  to  host  any 

email  address  under  this  domain  name  on  servers  operated  by  1  &  1 .  A  subscriber  using  the 
Providers’  services  can  access  his  or  her  email  account  from  any  computer  connected  to  the 
Internet. 

b.  The  Providers  maintain  the  following  records  and  information  with  respect  to  every 
subscriber  account: 

i.  Email  contents.  In  general,  any  email  (which  can  include  attachments  such 
as  documents,  images,  and  videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form 
in  the  account,  is  maintained  on  the  Providers’  servers  unless  and  until  the  subscriber  deletes  the 
email.  If  the  subscriber  does  not  delete  the  email,  it  can  remain  on  the  Providers’  computers 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 
Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book.  The  Providers  also  allow  subscribers  to  maintain  the 
equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

iii.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typical1-y-unvei'ified)identifyingdnformation-about.each-Subscriber, -including.  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g.,  active  or  closed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber.  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 
including  any  credit  card  or  bank  account  number. 

iv.  Transactional  information.  The  Providers  also  typically  retain  certain 
transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  (i.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 
(such  as  logging  into  the  account  through  the  Providers’  website). 

v.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 
complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 
search  history  or  web  history  associated  with  the  subscriber’s  account. 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  “Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  “Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the  user  and  others;  and  (C)  “Gchaf  ’  or  “Instant 
Messenger,”  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 

other,  in -real  time _ Oath  also- typically- maintains  content  and-records  relating.  to..AQL- instant 

message,  which  provides  a  chat  interface  through  which  users  can  communicate  with  each  other 
in  real  time. 

viii.  Preserved  and  backup  records.  The  Providers  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 
own  data  retention  policy. 

D.  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  1 8  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 
a  provider  of  an  electronic  communications  service  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  27 03  may  be  issued  by  “any  district  court  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  “has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  2711(3)(A)(i). 
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7.  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  the  subscriber  of  the  existence  of  the  warrant.  18  U.S.C. 
§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation.  18  U.S.C.  §  2705(b). 

== ~Ev=Prior  Applications— • —  —  - - - ==-— - 1 - ■. — _ 

8.  On  or  about  July  1 8,  2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  the  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
1,  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in  the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
their  investigation  into  Cohen  to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field 
Office.  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  the  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege.1  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


1  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization, 
pursuant  to  Fed.  R.  Crim.  P.  41 ,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen  Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  the  focus  of  the  Prior 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Warrants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  the  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  1 8  and  November  1 3, 20 17  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 20 1 7,  and  January  4,  20 1 8,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extending  the  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account.  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  USAO. 


This'affidavitfas-disGussed  belowpis-based-in  part  on  my^review-ofrthe  pen  register-data  obtained 


pursuant  to  the  November  7,  2017  and  January  4,  2018  orders  (the  ‘Ten  Register  Data”). 

10.  On  or  about  February  16,  2018,  the  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  This  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

II.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  FBI  are 
investigating,  among  other  things,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banks.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  other  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  material  information  from  financial  statements  and  other  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appears  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  2017 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (iii)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

in  connection  with 


agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations. -and-material.  omissions^Gohen-aveidcd  making  monthly-  payments  on  his 


loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 
certain  repayment  obligations  worth  millions  of  dollars. 

13.  Based  on  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 

MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 
communicate  with?  and  their  attorney, | 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 
of  the  principal  amount  of  the  taxi  medallion  loans;  (iii)  communicate  with  his  accountant  about 
the  contents  of  the  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
to  Additionally, 

Accouni  \ccount  and  |\.c  count,  respectively,  to  communicate  with  Cohen 

about  the  status  of  the  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 
the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B.  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  in  detail  below,  in  2014,  Cohen,  through  limited  liability  corporations 
(“LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Bank  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  the  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from  their  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  his  net  worth,  assets. 


available  cash-and  financial-outlook-.— Specificallyrbased-on-m-y-review-of  records  maintained  by 


Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-1”)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  LLCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).2  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  the  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 
Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  loan  payments. 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


2  One  of  these  companies,  Mad  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  which  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  borrow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-1,  in  2014,  prior  to  the  recent  upheaval 
in  the  taxi  industry — as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber — taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  short  term  credits,  as  the  market  value 


oftaximedallions  was^consistently-risingr-Gonsequentlyvtaximedallionloans — like  the  loans  held 


by  Cohen — were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee- 1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  in 
2014,  when  he  agreed  to  refinance  his  medallion  loans  for  approximately  $22  million,  which — 
according  to  letters  from  Capital  One  Bank  in  Sterling’s  files — was  greater  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $  1,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation.  The  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  maldng  the  medallions  collateral  for  the  notes.  To  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total,  Sterling  agreed  to  lend 
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approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements. 
Sterling  transferred  45  percent  of  that  debt  to  Melrose.3  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions.  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling’s 


request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 


(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77, 190, 000. 4  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen — who  was  the  direct  obligor  under  the  guarantee  agreements — was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  overtime,  the  collateral  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  I  know  from  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 


3  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  (“NCUA”). 

4  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1,  2014,  which  reported  assets  of  $99,420,000,  total  liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen — which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  in.  sum  .and  substance,-.ab.out-his.xash--flow  problems. and  a  monthly. -shortfalLof. 
approximately  $16,000.  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen’s 
statements,  his  personal  financial  information  “indicate[d]  a  strong  ability  to  make  up  the  difference 
in  payments.”  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  an 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28,  2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility — both  internally  and  with  Cohen — of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks.  According  to  these  records,  however,  Cohen  resisted  these  requests.  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as 
a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  their  loans  with  Cohen  by, 


02.28.2018 


12 


Case  l:18-cr-00602-WHP  Document  48-4  Filed  07/18/19  Page  48  of  105 


among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Melrose  and  extending  the  loan 
maturity  date  to  December  8,  2017. 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 
as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  named  who  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on  my  review  of  records  maintained  by 


Sterling;  as  well  as  the  interviews  with  Sterling  Employee- 1  and  Sterling  Hmploycc-2  referenced 


above,  I  know  that  by  or  before  October  2016,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans — and  because  Sterling  was  unfamiliar  with 

—Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  3 1 , 20 1 7,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  with  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 

Employee-2  on  or  aboutFebruary  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 
was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
from  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  terms  of  the  proposed  transaction,  and  noting  the  requirement  that 
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emailed  Sterling 


Melrose  agree  to  the  terms.  On  or  about  May  2,  2017, 


Kccount  to  inquire  about  the  status  of  the  transaction. 


Employee- 1  from  the 


i  Account  that 


Sterling  Employee-1  responded  t( 


Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending 


term  sheet 


shortly. 


i.  In  order  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 


financial  information  from  the  parties.  On  or  about  October  26, 201 6,  a  Sterling  employee  emailed 


Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 


the 


proceed  with  the  assumption  of  Michael’s  loans,”  Sterling  needed  certain  financial  information 


i  responded  from  the 


ccount,  copying 


Account,  that  he  would  send  a  financial  statement  and  tax 


returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 


request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 


Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  2017,  Cohen  emailed  Sterling 
Employee- 1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  The  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  the  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Cohen  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26,155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities' and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j.  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 
Employee- 1 , 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  20 1 7  F  inancial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Sterling 
Employce-l-,. -in-sum  and  substance, -:that-the-May-20:k7-Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee- 1  emailed  Cohen  at  the  Cohen 

Account  an  it  the  |^^^|Account,  attaching  a  non-binding  term 

sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 

On  or  about  August  29,  2017,  ^^^emailed  Sterling  Employee-1  from  the 
Account,  requesting  that  he  be  included  on  “all  future  e-mails  to  and/or 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Sterling  Employee-1  emailed  at  the 

Account,  Cohen  at  the  Cohen  Account,  and  at  the  Account,  and  provided  them  with  a 

revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent 
at  the  ^^^^^^^^^^^4ccount,  Cohen  at  the  Cohen  Account,  and  at  the  ^^^^ccount  a 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet, would  borrow 
$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  that  jwas  to 

acquire  from  Cohen. 

l.  Aspartofthe  agreement,  according  to  the  term  sheet,  $1,265,913  in  principal  (which 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,167  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1 ,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance — despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars — because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee-!, -hr  sum  and  subslancc,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement,  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  the  ransaction,  Cohen  would  no  longer 

have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  full  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose’s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and  jftr  its  credit 

underwriting  process.  In  response  to  Sterling’s  requests,  on  or  about  October  5,  2017,  I 
sent  from  the  .  Account  to  a  Sterling  employee  a  copy  of 

personal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  for  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  his  May  2017  Financial 
Statement.  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Account,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  “September  2017 
Financial  Statement”). 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 


represented  to  Sterling  that  Cohen  had-  a  negative  net- worth— -The -September  2017  Financial 


Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 5 
$3,200,000  in  real  estate  investments,  and  his  $  1 1 ,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  The  September  2017  Financial  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some  of  his  real  estate  investment  entities. 

o.  From  my  participation  in  an  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  time  Cohen  provided 
Sterling  with  these  financial  statements — in  or  around  September  2017 — Cohen  stopped  paying 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 


5  Notably,  the  September  2017  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whicj^wfl^considerably  less  than  the 
$650,000  valuation  ascribed  to  each  medallion  in  the  Coher  term  sheet. 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Coher^^^^^|  transaction  was  favorable  for  the  bank 
-  that  is,  tha  vould  be  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 
the  immediate  receipt  of  past-due  loan  payments.  On  December  29,  2017,  Sterling  sent  Cohen  a 
letter  statingjfaat  he  was  in  default  under  the  loans  jetween  Sterling  and  Cohen’s  medallion 

corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee-1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen  transaction,  Cohen  would  “bring  all  payments  up  to  date  as 

well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  the  closing  of  the  Cohen-'  transaction,  Sterling 

provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Coher  ^^^^|transaction,  however,  did  not  close.  On  or  about  January 
29,  2018^^^^the^^^^^^^^.ttomey,  emailed  attorneys  for  Sterling  from  the^^^Vtccount 
and  stated  that  “at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  after  the  Cohen-  jdeal  fell  apart, 

Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  (“Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  I  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen’s  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  I  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement.  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balanceto  $20r500, 000;: Cohen  also  suggested  revised  monthly 


interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirety  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $1,750,000),  and  would  need  to  make  larger  monthly  interest 
payments. 


s.  On  or  about  February  1, 2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[p]ayment  of  $1.250m  which  ALL  can  be  used  to  pay  down  principal,  if 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $1.250m.” 
(Emphasis  in  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  his  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose6)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  make  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“First  Republic'*’),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Cohen  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Sterling  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  withheld  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities. 


6  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  I 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  Melms^fUhat 
Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Cohen- 1 
transaction.  Based  on  my  review  of  reports  of  interviews  jmployees,  1  also  Know 

that  Cohen  called  employees  at  Melrose  regarding  the  Cohen  ransaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  the  name  of  Essential  Consultants  LLC  (the  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account.  When  Cohen 
opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions7 8  about  the  purpose  of  the  account — the  answers  to  which  First  Republic  Employee-1 
entered-intova^form^-^Cohenstated,— imsum-and-substanee^-that-hewas^jpeningEssential 


Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  in  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — wh  ich  he  said  was  not  his  main  source  of  income — separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen’s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 
received  substantial  payments  from  foreign  sources. 

c.  First,  on  or  about  October  27,  2016 — the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  of 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


7  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020.220. 

8  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel,  First 
Republic  Employee-1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  this  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  rather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  9  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Trump.  On  or  about  February  13,  2018,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

rrT^~=.-r~r=d.:::Sccond,-I-know:frommyu‘eview-o£First-Rcpublicbankrecordsthatwerescheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real -estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following: 

i.  Beginning  on  or  about  January  31,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 

9  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  line  of  credit  account  at  First  Republic  to 
the  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  2016,  a  wire  transfer  in  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  bank  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5,2017,  Cohen  began  receiving  payments  from 
Novartis  Investments,  SARL,  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”).  Between  April  2017  and  January 
2018,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  in  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

iii.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 


receiving  wire  payments  from  a  bank' account  associated  with  the  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants  Account  and,  from  in  or  about  June  2017  to  in  or  about  January  2018,  the 
Essential  Consultants  Account  received  nine  $50,000  payments  from  AT&T.  In  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  10, 2017,  June  9,  2017,  July  10,  2017,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  the  amount  $150,000  (totaling. 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KAI”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommertsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbanlc  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  fee  as  per 
Inv  BTA-101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 


08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31,  2017  to  on  or  about  January  10, 2018, 
the  Essential  Consultants  Account  received  approximately  $2,883,132.98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  10,  2018,  the  balance  in  the  Essential 
Consultants  Account  was  $1,369,474.23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  First 
Republic,  this  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C.  (the  “MDC&A  Account”). 

— -Cohen  was  the  only  authorized  signatory  on  the  account.-  Among  other  things,  the  MDC&A 
Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accounts  to  Sterling  during  the  negotiations  with  respect  to  the 
•ansaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration.10  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


10  Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  On  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 

individual  whom  I  believe  is  affiliated  with  KAI.  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement”  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1,  2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000.00)  US  Dollars,”  disbursed 
thro-ughTeight--$lA0j000-installment-SzbetweemMay=2-017-andrDecembe£T01^r^^^^^.^^ _ _  • ... 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants.  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee.” 

c.  On  or  about  F ebruary  1 3 , 20 1 7,  Cohen  emailed  an  AT &T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants] ’s  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  his 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  .  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 


d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
the  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
-Administration; — ■ — — — — — =— 


e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  firm,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
“jointly  represent  clients.” 

18.  Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclose  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
by  Getzel,  my  notes  j  1 

have  learned  the  following: 

a.  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 
York.  At  the  meeting,  Cohen  told  Getzel,  in  sum  and  substance,  that  he  had  set  up  a  law  practice 
called  Michael  D.  Cohen  &  Associates  P.C.,  and  a  consulting  company  called  Essential  Consultants 
LLC.  Cohen  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with  his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[a]ttached  is  a  draft  of  the  newPFS  as  of  September  30, 2017” 
and  attached  a  draft  of  the  September  2017  Financial  Statement.  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  his  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt.  In  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 


that  the- financial  statement did  notdist  any  assets  associated'with  either  the  Essential-Consultants 


Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D.  Cohen  &  Associates  POC  [v/c]  and  Essential  Consultants  LLC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 2017,  Cohen  called  Getzel  by  telephone — which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’s  email  with  the  answer  “[ljoolcs  good  to  me.”  Cohen  never  directed 
Getzel  to  make  any  changes  to  his  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017 — the  date  of  the  September  2017  Financial  Statement — Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the  MDC&A 
Account.  As  of  October  6, 2017,  the  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619.28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&A  Account  from  Sterling-andMelrose, -itappears.that-Coh.en  also, substantialLy_understated. _ 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  my  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following: 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  in  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600.41. 

c.  As  of  September  30, 2017,  Cohen  had  $260,689.1 8  in  an  account  at  Signature  Bank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  his  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017. 

f.  As  of  September  30, 2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TD  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife — and  the  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  In  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,014,05 1 .80  in  his  accounts 
at- Capital  One  Bank, -Signature  -Bank?  TD-  Bank7^Bcthpage  Credit  Union,  =First-Republic,-  -  and 
Morgan  Stanley. 

21.  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee-1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  the  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 


sell  his  interest  in  taxi  medallions  and  the  associated  debt  to 


Cohen  not  only 


misrepresented  his  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 


negotiated  with 


it  appeal's  that 


tgreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pay 


pproximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee- 1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 


Employee- 1  to  Cohen  and 


See  supra  14(k).  According  to  the  term  sheet. 


vould  borrow  $20, 000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions — 


vas  to  acq  uire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  medallions, 
the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $1,265,913  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 

or  any  other  form  of  payment  or 


mention  of  a  $3.8  million  payment  from  Cohen  to 
financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 


describing  the  terms  of  the  Cohen-’1 
not  mention  any  payments  from  Cohen  to 


transaction  and  the  new  loan  to 


including  a  $3.8  million  payment.  The 


memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  in  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 

agreed  to  a  purchase 


Employee-1  and  Sterling  Employee-2,  they  were  never  told  thatl 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  and  did  not  disclose  any  payment  from  Cohen  to 

in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 
Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  to 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled;-“Salemf4SlYG4Vledallion  Entities=and-Debt--Assumption5F(the  “Getzel-- Memorandum”).- 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and 

in  part,  as  follows:  “Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’]  paying  down  the 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.”n 

b.  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  to  ,  but  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  pa;;  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  Financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  ^^  was  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  to 


11  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  20 1 5,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
tc  In  the  course  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 

Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 


^undisclosed— side-payment  — witb| 
it  the 


at -the 


\ccount,  and 


Account, _B 
Account.  Specifically, 


as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohen  transaction  with  Sterling: 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  14(g),  to  send  term  sheets  to  Sterling,  see  supra  f 
14(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  If 
16,  to  send  financial  statements  to  Sterling,  see  supra  If  14(i),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  If  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  If  14(o),  to  tell  Sterling  on  February  1,  2018,  he 
does  not  have  the  ability  to  pay  more  than  $  1 ,25 0,000,  see  supra  If  1 4(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payments  to  the  Essential  Consultants  Account,  see  supra  f 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 


I  has  used  the 


Account  to  communicate  about 


the  proposed  taxi  medallion  transaction  with  Cohen,  which  appears  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  If  14(g).12  Specifically,  as  described  above,  as  early  as  May  2,  2017, 
lused  the  Account  to  inquire  about  the  status  of  the  transaction, 

see  supra  U  14(h).  He  used  the  Account  to  exchange  drafts  of  the  proposed  term 


sheet  with  Cohen  J 
used  by  .1 
see  supra  If  14(1).  Tht 


md  Sterling,  see  supra  If  14(j).  The 
to  send  a  personal  financial  statement  foi 

lAccount  was  copied  on  emails  from  the  , 


Account  was  also 
to  Sterling, 


“Accountaboutthc'transactionf-see-=^Mpra~-Tf— f4(i)— and=-was--listed“onH 


financial- 


statement  as  the  contact  email  fo  see  supra  ^  14(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1,  2017 — at  or  around 
the  time  the  and  Cohen  were  negotiating  a  term  sheet-  |used  the 

Account  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account, 
c.  las  used  the  ^^.ccount  to  communicate  with  Sterling  employees,  Cohen, 

and  ibout  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 

See  supra  Ifif  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017,^^j  old  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  ]f  14(j). 
Additionally,  vas  involved  in  making  revisions  to  the  parties’  term  sheets,  and  he  told 

Sterling  on  January  29,  2018  that  ^^^^vould  not  go  forward  with  the  planned  transaction, 
see  supra  If  14®,  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 
Cohen  to  and  the  reasons  for  the  collapse  of  the  Cohen-  transaction. 


12  Forinstancc,  from  records  provided  by  Sterling,  I  know  that  on  or about  December  2, 
2016.H|^|^^^^^^Bsent  an  email  to  a  Sterling  emplovee  using  the . 

Account.  The  email  forwarded  correspondence  between  who  was  using  the] 

Account,  and  an  employee  of  Capital  One  regarding  extending 
Capital  One. 


>an  with 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
.  was  previously  receiving  at  the  Cohen  Account.  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  the 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  following.  Kindly  use  this  new  information  for  all  future 
contact  and  communications';-”  The  signature  line  onthe -email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,”  as  well  as  the  MDCPC  Account  as  the  email  address.13 

27.  In  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 

pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  the  Cohen  Account,  to 
communicate  with  the  Vccount,  and  to  send  and  receive  emails  from  other  email  accounts 

about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
ere  communicating  about  a  term  sheet  for  the  Cohen  taxi 


13  Based  on  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  the  account  to  communicate  with  numerous  individuals  with 
whom  he  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infra  ^  27. 
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medallion  transaction,  see  supra  If  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 
emails  froni  at  the  Vccount.  For  instance,  on  or  about  August  22,  2017,  ^^|used 

th«  jj  Account  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee- 1  responded  tc  t  the 

and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 
Account  to  send  an  email  to  Sterling  Employee- 1. 

b’---:Asnotodaboveyorfor  about-Septcmber  Tf20T7,  Gohemused  the  MDCPC  Account 
to  send  or  receive  eight  emails  with  the  j^^^^^^^^Jkccount. 

c.  Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appears  Cohen  has  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017 — the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  16(d),  17(c) — Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&T 
for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017 — which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  fflf  16(d),  17(d) — 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen’s 
assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  the  MDCPC  Header  Infonuation,  I  have  learned  that  Cohen  has 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appears  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T.  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @att.com  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 
receive  emails  from  accounts  belonging  to  individuals  using  @novartis.com  email  addresses. 
Since  November  15, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  I  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs — both  of  which  Cohen  appears  to  have  a 


consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  on  my  review  of  the  Pen  Register  Data,  see  supra 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Account  to  communicate  with  the  I 

|  Account,  the  ^^Account,  and  other  email  accounts  that  appear  likely  to  be  relevant 
to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 

a.  Emails  sent  by  the  Cohen  Account  to  the  Account  on  or  about  December  1 8, 

2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4,  2018  at  3:31  p.m. 

b.  An  email  sent  by  the  Cohen  Account  to  Account  on  or  about 

January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  account 


on  or 


about  December  1,  2017  at  2:14  p.m.,  December  29,  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 
p.m.,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 


t  email  account 


emails  contained  in  the  Cohen  Account,  I  have  learned  that  the 


belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

•  dr'-Emails  from  the  Cohen  Account  to'email  accounts  belonging  to  Sterling  employees, - 
including  Sterling  Employee-1,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29,  2018  at  8:29  p.m.,  January  30,  2018  at  6:44 
p.m. 


e.  An  email  sent  from  the  Cohen  Account  to  the  email  account 


clientserviceny@firstrepublic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above, 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 


f.  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 


including  emails  on  or  about  December  4,  20 1 7  at  2: 1 7  p.m.  and  January  29, 


20 1 8  at  5 :43  p.m.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 


email  address  belongs  to 


I  believe  that  the 


29.  Based  on  my  review  of  records  maintained  by  Sterling,  I  know  that  Cohen  used  the 


Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen- 


transaction. 


Based  on  my  training  and  experience,  I  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
save  documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 
contain  evidence  related  to  the^SubjeeTOffenses.^-  - - — - - ~ - : 

30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  his 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 
with|j||^^^^^^^^^^^^^^^^^^^^^^^^^^|primarily  the 

MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization.  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other  content  information 
from  th|  Account,  ^^^^|Account  and  Recount  since  on  or 

about  October  1,  2016 — the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — will  reflect  communications  with  the  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 
described  above — such  as  -of  his  misstatements  and 

omissions  to  financial  institutions. 
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3 1 .  Temporal  Limitation.  This  application  seeks  all  emails  and  other  requested  content 
information  specified  in  Attachments  A,  B,  C,  and  D  for  the  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  USAO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  received  before  November  14,  2017. 


This  application  also  seeks  other-information  speeified  above  associated  with  the  Cohen  Account 


that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant,  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14,  2017. 

c.  For  the  Account  and  Account,  this  application 

seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
20 1 6  is  the  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with  the 

d.  For  the  Account,  this  application  seeks  emails  and  all  other  content 

information  specified  above  sent,  created,  or  received  between  December  1,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  2016  is  the  month  in  which  I 
began  representing  the  n  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Fruits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Google’s  servers  associated  with  the  Cohen  Account  will  contain  evidence. 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  II  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account. 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 


and/or  taxi:  medallions; 


c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or  entities 

associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 


e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


liabilities,  to  others,  including  to 


Imd/or  entities  associated  with  him; 


f.  Communications  between  the  Cohen  Account  and/or  MDCPC  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic-and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Cohen  Account  and  MDCPC  Account  owner’s  intent  as  if 
relates  to  the  Subject  Offenses  under  investigation. 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 


Account  and 


information  stored  on  Google’s  servers  associated  with  thJ 

I  Account  will  contain  evidence,  fruits,  and  instrumentalities  of  violations  of  the  Subject 
Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 


identity  of  the  person(s)  who  created  or  used  th| 
Account; 


Account  and 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
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communicated  with  the  Account  and  ^Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement. for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 
and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 

-institution^s)^regarding-6ohen-s^finances; - - — - — — ============ 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the 
Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 
owner; 

g.  Evidence  indicating  the  ^^^^^^tccount  and 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation. 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the  Account  will  contain  evidence, 

fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  tln^^H  Account; 


Account  and 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  ind/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  ^^ccounEabout-any-matters-relating  to  any  plan  or.  proposal  or-. - 
agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  and/or  entities  associated  with  him; 

d.  Communications  between  the  Account  and  others,  including  employees  or 

representatives  of  Sterling,  Melrose,  or  other  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

HI.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C.  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  the 
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status  of  the  investigation  and  related  proceedings,  attorneys  for  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant. 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 


locale  evidence,  fruits,  and  instrumentalities 


of-the  Subject Offenses,  including  but  not  limited  to 


undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account.  This  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated  with  emails, 
including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  anc  are  attorneys,  the  review  of  the  content  within  the  Subject 

Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  applicable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team,”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigationrxausing-himdQ-destrQy  evidence,-flee  from  prosecutiQ.n,-or 


otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my  experience 
investigating  white  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  his  flight  from  prosecution.  See  1 8  U.S.C.  §  2705(b)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705  (b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  1 80  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  this  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§2703(b)(1)(A)(forcontents)-and-§~2703fc)fl-XAXffor-records-and-Other-information),-andthe 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41. 


Special  Agent  Mason  Posilkin 
United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  February,  2018 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
|5}gmail.com, 

11 

Maintained  at 
Premises  Controlled  by  Google,  Inc., 
USAO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
■  Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Ageni^^^^^^^^^Jof  the  United  States 
Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  ^^^^^|@gmail.com  7lgmail.com,  and 

I,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
-existence  of  this  Warrant  and  Grderto  thedisted^subscriber  orto  anyiother  person  forraperiodof . 


1 80  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
@gmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 


with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 


and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1,2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1,2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

ILL  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
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I 

I 

I 

the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 

I 

(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

1 

of  the  person(s)  who  created  or  used  the  Subject  Account; 

i 

i 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

— gGmmunieationspreeordsf^OGumentS5=and=other=files4nvolving^a=plan^proposat  or— - - 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  t(  and/or 

entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 

LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  t<|  md/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

==r=^i^-Evidence-indicating-the^Subjeet-Aeeount=owner=s--intent-aarit-relatesrtothe'Subjeet— 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
account:^  @gmail.com  and  the  “Subject  Accounts”)  for  the  time 

period-between  October-1  ,-201 6  and  thedatemfdhis-warrant,  inclusive.. .  . _ 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 

~  and  records  ofr actions  takenr-  - - - - — - - - — - - - - - —==-~4 

I 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  t<  and / or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 


communicated  witli  the  Subject  Aecounts-about  any  matters  relating  to  any  plan  or  proposal  or- 


agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  and/or  entities  associated 

with  him; 


d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
@aol.com,  Maintained  at 
Premises  Controlled  by  Oath,  Inc., 
US  AO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 


TO:  Oath,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”)  . 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  @aol.com,  maintained  at  premises  controlled  by  Oath, 
Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachment  C 
hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies, 
within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II 
of  Attachment  C  hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in 
Sections  III  and  IV  of  Attachment  C.  The  Government  is  required  to  serve  a  copy  of  this  Warrant 
and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be 
served  via  electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of 
accepting  service. 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 


necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 


for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 
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Email  Search  Attachment  C 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Oath,  Inc.  (the  “Provider”),  headquartered  at  22000  AOL  Way, 
Dulles,  Virginia  20166,  and  applies  to  all  content  and  other  information  within  the  Provider’s 
possession,  custody,  or  control  associated  with  the  email  account  @aol.com  (the  “Subject 
Account”)  for  the  time  period  between  December  1,  2016  and  the  date  of  this  warrant,  inclusive. 

- A-law-enforcement  officer-will-serve  this-warrant-by-transmitting-^it-via-emaiLor-another 

appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message'  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 
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d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken. 

f.  Search  History.  All  search  history  and/or  web  history. 


g.  Preserverd  or  backup  records?  Any  preserved  or  backup  copies  of  any  of  the  foregoing 


categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(1)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to^^^^|  md/or  entities  associated 

with  him; 
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c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

-d“Communications~between'rthe43ubjeetvAeeOunt“andTt)thers,-including^employeesror 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances;  and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
|  ;.com,  maintained  at 
Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


^  Search  Warrant  and  Non-Disgeosijre  Order 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

>f  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 

i,  maintained  at  premises  controlled  by  1 
&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 
Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 


cause  to  believe  the  email  account 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent 
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2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 

-  -  necessary,  except  that  Provider  may-.disclose  this- Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Issued 


HONORABLE  GABRIEL  W.  GORENSTEIN 
Chief  United  States  Magistrate  Judge 
Southern  District  of  New  York 


02.28.2018 
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Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and-the-datc-of-this-warrant-inclusive - - - - -  - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
infonnation  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,'  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 


and  ~reeords~of  actions‘taken; - == - - - - — - — : - — — 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


02.28.2018 
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and/or 


medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  tc 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 
person(s)  —  who- communicatedrwithThe  Subject^tre"ounf:abouf  any  matters  relating  to“Essentiaf 


Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  t(^^^^^^^^^Jand/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02.28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 
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|  j  }-/  l  [  -j  j  1  \  {  t4_ 

AO  93  (SDNY  Rev.  05/10)  Seardh'ani  S^izure'WakJnt'^  1  '  *“ 


United  States  District  Court 

for  the 

Southern  District  of  New  York 

In  the  Matter  of  the  Search  of 

(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

A  Device  Containing  the  Results  of  Three  Email  Search 
Warrants,  See  Attachment  A 

SEARCH  AND  SEIZURE  WARRANT 

To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )\ 

A  Device  Containing  the  Results  of  Three  Email  Search  Warrants,  See  Attachment  A 


The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or 

*  (nnt  tn  pxr.ppB  14  Bn 


property. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 

'  (not  to  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  Sf  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken.  \ y  i  ,  / , 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  0f  the  Court. 

</  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clerk  df  the  Court. 


; , !  q  ■ :  U$m!pitidls 

Sf  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  1 8  U.S1C.y/2705  (except  fo;r  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who.  of  whose  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  iTffor  30  days  (not  to  exceed  30).  ' ' , '  U  7  *  U 

t :  /  hiS  *  ••  -  • 

□until,  the  faptS)justifying,  the  latei^peci^c  d'ate  of 

Date  and  time  issued:  fiu  zs, 

City  and  state:  New  York,  NY _  _ Hon.  Gabriel  W.  Gorenstein.  U.S.  Magistrate  Judge 


Printed  name  and  title 
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Attachment  A 


I.  Device  to  be  Searched 

The  device  to  be  searched  (the  “Subject  Device”)  is  described  as  a  black  and  red  USB  drive 
with  a  white  label  that  says  “Tracking  #:  1 802081 40208”,  which  contains  emails  and  other  content 
information  obtained  pursuant  to  the  three  search  warrants,  numbered  17-mj-00503,  17-mj-00855 
and  17-mj-00854,  obtained  by  the  Special  Counsel’s  Office  (“SCO”),  less  the  emails  that  were 
screened  and  removed  by  the  SCO’s  privilege  team. 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Device  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”),  as  listed  below: 

a.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

c.  The  identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the 

person(s)  —  who  communicated  with  fiigmail.com  and/or  |  (the 

“Subject  Accounts”)  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  and/or  entities  associated  with  him; 

d.  Communications  between  the  Subject  Accounts  and  Jeffrey  Getzel  relating  to 
Michael  D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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e.  Evidence  indicating  the  owner  of  the  Subject  Accounts’  intent  as  it  relates  to  the 
Subject  Offenses  under  investigation. 
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UNITED  STATES  DISTRICT  COURT  ^ 
SOUTHERN  DISTRICT  OF  NEW  YORK 


18  MAG  2877 


In  the  Matter  of  a  Warrant  for  All  j 
Content  and  Other  Information  j 
Associated  with  the  Email  Accounts  j 


TO  BE  FILED  UNDER  SEAL 


AGENT  AFFIDAVIT 


Premises  Controlled  by  Google,  Inc., 
US  AO  Reference  No.  201 8R00127 


|i,  Maintained  at 


and 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
~_for"Stored  ElectronicXommunications 


STATE  OF  NEW  YORK  ) 

)  ss. 

COUNTY  OF  NEW  YORK  ) 

Special  Agent '  |of  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states; 

I.  Introduction 

1 ,  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 
of  New  York  (the  “USAO”).  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 
General  from  May  201 1  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
of  financial  crimes,  including  frauds  oil  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  pursuant  to  18 
U.S.C.  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 


(the  “Subject 


lgmail.com. 


Accounts”),  maintained  and  controlled  by  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
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Amphitheatre  Parkway,  Mountain  View,  California  94043.  The  information  to  be  searched  is 
described  in  the  following  paragraphs  and  in  Attachments  A  and  B  to  the  pioposed  wan  ant. 

3.  On  or  about  February  28,  2018, 1  submitted  an  Affidavit  in  support  of  an  application 


for  a  search  warrant  pursuant  to  18  U.S.C.  §  2703  for  all  content  and  other  information  associated 
with  the  Subject  Accounts  maintamed  and  controlled  by  the  “Provider,  a  true  and  correct  copy  of 


which  is  attached  hereto  as 


Exhibit  A  (the  “Original  Affidavit”),  and  which  is  incorporated  by 


reference  as  if  fully  set  forth  her  ein. 

'  4.  OnlhatTame  date,  the  Hmorabie  Gabriel  W.  Oorenstein,  United  States  Magistrate 
Judge,  issued  a  search  warrant  for  the  requested  data,  a  true  and  correct  copy  of  which  is  attached 


hereto  as  Exhibit  B  (the  “Original  Search  Warrant”).  Shortly  thereafter,  the  Provider  was  served 
with  the  Original  Search  Warrant.  On  or  about  March  7,  2018,  the  Provider  provtded  a  response 
to  the  Original  Search  Warrant.  That  return  was  incomplete  because  the  Provider  declined  to 


produce  data  that  it  stored  on  computer  servers  located  outside  of  the  United  States.  It  is  my 
understanding,  from  speaking  with  the  Assistant  United  States  Attorney  assigned  to  this  matter  as 
well  as  other  law  enforcement  agents,  that  the  Provider' s  refusal  to  provide  foreign  stored  data  was 
in  light  of  the  Second  Circuit's  decision  in  which  it  held  that  Microsoft  Corporation  was  not 
required  to  produce  foreign  stored  data  pursuant  to  a  warrant  issued  under  the  Stored 
Communications  Act.  See  Matter  of  Warrant  to  Search  a  Certain  E-Mail  Account  Controlled  and 
Maintained  by  Microsoft  Corporation,  829  F.3d  197  (2d  Cir.  2016),  cert  granted  138  S.  Ct.  356 


(2017)  (the  “Microsoft  Litigation”). 


■The  Original  Affidavit  also  sought  content  information  for  two  additional  email  accounts  hosted 
b(  S"  Ais  affidavit  ortiy  requests  a  search  warrant  with  respect  to  the  Subject 


Accounts  described  herein. 


2017.03.25 
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5.  On  March  23,  2018,  the  Clarifying  Lawful  Overseas  Use  of  Data  Act  (the  “CLOUD 

Act”)  was  enacted  and  became  law.  The  CLOUD  Act  clarifies  that  in  responding  to  legal  process 

issued  under  the  Stored  Communications  Act,  providers  are  required  to  disclose  data  even  if  it  is 

stored  abroad.  Specifically,  section  103  of  the  CLOUD  Act  amended  18U.S.C.§2713as  follows: 

§  2713.  Required  preservation  and  disclosure  of  communications  and  records 
A  provider  of  electronic  communication  service  or  remote  computing  service  shall  comply 
with  the  obligations  of  this  chapter  to  preserve,  backup,  or  disclose  the  contents  of  a  wire 
or  electronic  communication  and  any  record  or  other  information  pertaining  to  a  customer 
or  subscriber  within  such  provider’s  possession,  custody,  or  control,  regardless  ot  whether 
such  communication,  record,  or  other  information  is  located  within  or  outside  of  the  United 
States. 

6.  From  my  background,  training,  and  experience  in  this  investigation  and  in  others,  I 
know  that,  in  general,  any  email  (which  can  include  attachments  such  as  documents,  images,  and 
videos)  sent  to  or  from  a  subscriber’s  account,  or  stored  in  draft  form  in  the  account,  is  maintained 
on  the  Provider’s  servers  unless  and  until  the  subscriber  deletes  the  email.  It  the  subscriber  does 
not  delete  the  email,  it  can  remain  on  the  Provider’s  computers  indefinitely.  Even  if  the  subscriber 
deletes  the  email,  it  may  continue  to  be  available  on  the  Provider’s  servers  for  a  certain  period  of 
time.  In  addition,  from  my  review  of  other  search  warrant  returns  in  this  investigation,  I  know  that 
the  subjects  of  the  investigation  maintained  email  data  relevant  to  the  investigation  in  email 
accounts  for  many  months  after  the  email  was  sent  or  received. 

7.  Accordingly,  I  respectfully  submit  tins  Affidavit  seeking  the  issuance  of  the  attached 
proposed  search  warrant  which  seeks  the  same  data  as  was  sought  in  the  Original  Search  Warrant, 
for  the  reasons  set  forth  in  the  Original  Affidavit  and  herein. 

II.  Request  for  Non-Disclosure  and  Sealing  Order 

8.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 

As  a  result,  premature  public  disclosure  oi  this  affidavit  or  the  requested  warrants  could  alei  t  target 
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subject  Michael  Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from 
prosecution,  or  otherwise  seriously  jeopardize  the  investigation.  In  particular,  based  on  my 
experience  investigating  white  collar  cases,  including  cases  featuring  documents  such  as 
agreements,  drafts  of  agreements,  notes  of  conversations,  and  other  documentary  evidence, 
premature  disclosure  of  an  investigation  may  cause  the  target  of  the  investigation  to  attempt  to 
destroy  or  conceal  such  evidence.  In  addition,  as  set  forth  in  the  Original  Affidavit,  Cohen  uses 
computers  and  electronic  communications  in  furtherance  of  his  activity  and  thus  could  easily 
delete,  encrypt,  or  otherwise  conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn 
of  the  Government’s  investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the 
financial  means  that  would  facilitate  his  flight  from  prosecution.  See  18  U.S.C.  §  2705(b)(2),  (5). 

9.  Accordingly,  there  is  reason  to  believe  that,  were  the  Provider  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Provider 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

10.  For  similar  reasons,  i  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further  order  of  tills  Court  to  provide  copies  of  the  warrant  and  affidavit  as 
need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 
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III.  Conclusion 

1 1 .  Based  on  the  foregoing,  I  respectfully  request  that  the  Court  issue  the  warrant  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  U.S.C. 
§  2703(b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  provisions  of  Federal  Rule  of  Criminal  Procedure  41 . 


United  States  Attorney's  Ultice 
Southern  District  of  New  York 


Sworn  to  before  me  this 
-A/??  day  of  April,  2018 


HONORABLE  HENRY  B.  PITMAN 


United  States  Magistrate  Judge 
Southern  District  of  New  York 


2017.03.25 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


in  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 


A  eamdflffiH  with  the  Email  Accounts 
|@gmaihcom, 
|@gmail.com,  and 

Maintained  at 

Premises  Contra UecUw^oogleUnc 
the  Email  Aecoun’B 
Maintained  at  Premises  Controlled  by 
Oath,  Inc.,  and  the  Email  Account 

H  maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  IISAO  Reference  No. 
20I8R00I27 


TO  BE  FILED  UNDER  SEAT 
AGENT  AFFIDAVIT 

18  MAG  169  6 


Agent  Affidavit  in  Support  of  Application  for  a  Search  Warrant 
for  Stored  Electronic  Communications 


STATE  OF  NEW  YORK  ) 


)  ss. 


COUNTY  OF  NEW  YORK  ) 
Special  Agent  I 


rf  the  United  States  Attorney’s  Office  for  the  Southern 
District  of  New  York,  being  duly  sworn,  deposes  and.  states: 

I.  Introduction 
A.  Affiant 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’ s  Office  for  the  Southern  District 
of  New  York  (tire  “USAO”).  I  have  been  a  Special  Agent  with  the  ITSAO  since  August  2016.  I 
previously  served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector 


General  from  May  2011  to  August  2016.  In  the  course  of  my  experience  and  training  in  these 
positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a  wide  array 
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of  financial  crimes,  iucluding  frauds  on  financial  institutions.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts. 

B.  The  Provider,  the  Subject  Account  and  the  Subject  Offenses 

2.  I  make  this  affidavit  in  support  of  an  application  for  a  search  Warrant  pursuant  to  1 8 
U.S.C,  §  2703  for  all  content  and  other  information  associated  with  the  email  accounts 

l@gmail.com  (the  “Cohen  Account”),  ft  (the  'AID CPC 

(the 

B\ccounf’),  anc^^l^aol.com  (the  Account”)  (collectively,  the 

“Subject  Accounts”).  The  Cohen  Account 
Account  are  maintained  and  controlled  by  Google,  Inc,,  headquartered  at  1600  Amphitheatre 
Parkway,  Mountain  View,  California  94043  (“Google”),  the  MDCPC  Account  is  maintained  and 
controlled  by  1  &  1  Internet  Inc.,  headquartered  at  701  Lee  Road,  Suite  300,  Chesterbrook, 
Pennsylvania  19087  (“1  &  1”),  and  tin  Account  is  maintained  and  controlled  by  Oath,  Inc., 

22000  AOL  Way,  Dulles,  Virginia  20166  (“Oath”)  (together,  the  ‘Providers”).  The  information 
to  be  searched  is  described  in  the  following  paragraphs  and  in  Attachments  A,  B,  O  and  X)  to  the 
proposed  warrants, 

3 .  As  detai  led  below,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  contain 
evidence,  fruits,  and  instrumentalities  of  violations  of  18  U.S.C.  §  371  (conspiracy  to  defraud  the 
United  States),  1005  (false  bank  entries),  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud)  (collectively,  the  “Subject  Offenses”).  The  Target  Subjects  of 
this  investigation  are  MICHAEL  COHEN  (“Cohen”)  and  others  known  and  unknown.  This 
affidavit  is  based  upon  my  personal  knowledge,  my  review  of  documents  produced  pursuant  to 
grand  jury  subpoenas  and  prior  search  warrants,  my  review  of  interview  reports  prepared  by  other 
law  enforcement  officers,  and  my  conversations  with  other  law  enforcement  officers,  as  well  as 


,ccount,  and 


Account”),  i 


dig  in  ail.com  (the  “ 


Account”), 
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„  being  fitted  for  the  limited  purpose  of  establishing  ptohahle  -  *  dees  not  Wude  all 
the  facts  I  have  learned  dui'ing  my  investigation.  Where  the  contents  of  documents  and 
statements,  and  —ions  o,  others  ate  teposted  herein,  .toy  ate  repotted  in  snhstance  and  » 

part,  except  where  otherwise  indicated. 

C.  Services  and  Records  of  the  Provider 
„  4,  i  have  learn  edthe  following  about  the  Providers: 

'  .  Tto  Providers  offer  email  services  to  tiro  pnblio.  In  particular,  Google  permits 

■  subscriber  to  nrahrtain  email  aeeoturts  under  any  domain  name  nnder  the  snbseriber,  ccnh’ol.  For 

L  I  pi  Google  enables  the  subscriber 

example,  if  a  subscriber  controls  lire  domain  naim 

to  host  any  email  address  nnder  *is  domain  name  on  -  operated  hy  Googie.  Oath  pernnts 

subscriber’s  to  maintain  email  accounts  under'  tire  domain  name  aol.com.  1  &  1  permits  subscribers 

t0  maintain  email  accounts  turder  any  domain  name  .under  the  snbseriber,  control  Per  example, 

1  &  1  enables  the  subscriber  to  host  any 

if  a  subscriber  controls  the  domain  natru  * 

, ,  j  u, , ,  i  fa  }  A  subscriber  using  the 
email  address  under  this  domain  name  on  server’s  operated  by  1  • 

Q,  her  email  account  fiom  any  computer  connected  to  the 
Providers’  services  can  access  ms  .1 


Internet. 

b.  The 
subscriber  account. 


Providers  maintain  the  following  records  and  information  with  respect  to  every 


as 


i  Email  contents.  In  general,  any  email  (which  can  include  attaehments  such 
documents,  images,'  and  videos,  sent  to  or  horn  a  subscribes  account,  or  stored  hr  draff  form 
*  account,  is  manned  on  the  Providers’  servers  unless  and  until  ffte  subscriber  deletes  the 

3 
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indefinitely.  Even  if  the  subscriber  deletes  the  email,  it  may  continue  to  be  available  on  the 

Provider’s  servers  for  a  certain  period  of  time. 

ii.  Address  book  '  The  Providers  also  allow  subscribers  to  maintain  the 

equivalent  of  an  address  book,  comprising  email  addresses  and  other  contact  information  of  other 
email  users. 

in.  Subscriber  and  billing  information.  The  Providers  collect  and  maintain 
(typically  unverified)  identifying  information  about  each  subscriber,  including,  for  example,  name, 
username,  address,  telephone  number,  and  alternate  email  addresses.  The  Providers  also  maintain 
records  concerning  the  date  on  which  the  account  was  created,  the  Internet  protocol  (“IP”)  address 
of  the  user  at  the  time  of  account  creation,  the  current  status  of  the  account  (e.g„  active  or  dosed), 
the  length  of  service,  and  the  types  of  services  utilized  by  the  subscriber,  Additionally,  for  paying 
subscribers,  the  Providers  maintain  records  of  the  subscriber’s  means  and  source  of  payment, 

including  any  credit  card  or  bank  account  number, 

iy.  Transctctipnal  information .  The  Providers  also  typically  retain  ceitam 

transactional  information  about  the  use  of  each  account  on  its  system.  This  information  can  include 
records  of  login  (i.e.,  session)  times  and  durations  and  the  methods  used  to  connect  to  the  account 

(such  as  logging  into  the  account  through  the  Providers’  website), 

v.  Customer  correspondence.  The  Providers  also  typically  maintain  records 
of  any  customer  service  contacts  with  or  about  the  subscriber,  including  any  inquiries  or 

complaints  concerning  the  subscriber’s  account. 

vi.  Search  history.  Google  and  Oath  also  typically  maintain  records  of  any 

search  history  or  web  history  associated  with  the  subscriber’s  account. 


♦ 
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vii.  Associated  content.  Google  also  typically  maintains  content  and  records 
relating  to  the  following  applications  that  are  associated  with  its  e-mail  accounts:  (A)  Google 
Docs,”  which  provides  document-editing  software  that  can  be  used  to  create,  share,  store,  and 
manage  documents  online;  (B)  "Google  Drive,”  which  enables  users  to  store  files  on  Google 
servers,  where  they  can  be  accessed  remotely  by  the.  user  and  others;  and  (C)  “Gohat  or  Instant 
Messenger,"  which  provides  a  chat  interface  through  which  users  can  communicate  with  each 
other  in  real  time.  Gath  also  typically  maintains  content  and  records  relating  to  AOL  instant 
message,  which  provides  a  chat  interface  tlirough  which  users  can  communicate  with  each  other 

in  real  time. 

via,  Preserved  and  backup  records.  The  Provider's  also  maintain  preserved 
copies  of  the  foregoing  categories  of  records  with  respect  to  an  account,  for  at  least  90  days,  upon 
receiving  a  preservation  request  from  the  Government  pursuant  to  18  U.S.C.  §  2703(f).  The 
Providers  may  also  maintain  backup  copies  of  the  foregoing  categories  of  records  pursuant  to  its 

own  data  retention  policy. 

|).  Jurisdiction  and  Authority  to  Issue  Warrant 

5.  Pursuant  to  18  U.S.C.  §§  2703(a),  (b)(1)(A)  &  (c)(1)(A),  the  Government  may  require 

a  provider  of  an  electronic  communications  seivice  or  a  remote  computing  service,  such  as  the 
Providers,  to  disclose  all  stored  content  and  all  non-content  records  or  other  information  pertaining 
to  a  subscriber,  by  obtaining  a  warrant  issued  using  the  procedures  described  in  the  Federal  Rules 
of  Criminal  Procedure. 

6.  A  search  warrant  under  §  2703  may  be  issued  by  “any  district  corn!  of  the  United  States 
(including  a  magistrate  judge  of  such  a  court)”  that  "has  jurisdiction  over  the  offense  being 
investigated.”  18  U.S.C.  §  271  l(3)(A)(i). 
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7,  When  the  Government  obtains  records  under  §  2703  pursuant  to  a  search  warrant,  the 
Government  is  not  required  to  notify  tire  subscriber  of  tire  existence  of  the  warrant.  18  U.S.C, 

§  2703(a),  (b)(1)(A),  (c)(2)  &  (3).  Additionally,  the  Government  may  obtain  an  order  precluding 
the  Provider  from  notifying  the  subscriber  or  any  other  person  of  the  warrant,  for  such  period  as 
the  Court  deems  appropriate,  where  there  is  reason  to  believe  that  such  notification  will  seriously 
jeopardize  an  investigation,  18  O.S.C,  §  2705(b). 

E.  Prior  Applications 

8,  On  or  about  July  1 8, 2017,  in  connection  with  an  investigation  being  conducted  by  the 
Office  of  the  Special  Counsel  (“SCO”),  die  Federal  Bureau  of  Investigation  (“FBI”)  sought  and 
obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United  States  District  Judge  for  the  District 
of  Columbia,  a  search  warrant  for  emails  in  the  Cohen  Account  sent  or  received  between  January 
l}  2016  and  July  18,  2017.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  from 
Judge  Howell  search  warrants  for  emails  in  the  Cohen  Account  sent  or  received  between  June  1, 
2015  and  November  13,  2017,  and  emails  in -the  MDCPC  Account  sent  or  received  between  the 
opening  of  the  account  and  November  13,  2017.  The  SCO  has  since  referred  certain  aspects  of 
then  investigation  into  Cohen  to  the  USAO,  which  is  Working  with  tire  FBPs  New  York  Field 
Office,  As  part  of  that  referral,  the  SCO  provided  the  USAO  with  emails  and  other  content 
information  obtained  pursuant  to  tire  search  warrants  executed  by  the  SCO,  which  had  already 
been  reviewed  for  privilege. 1  As  discussed  below,  this  affidavit  is  based  in  part  on  my  review  of 


5  In  an  abundance  of  caution,  in  a  separate  application  the  USAO  has  sought  authorization 
nursuantto  Fed.  R.  Grim.  P.  41,  to  review  the  emails  obtained  pursuant  to  the  Prior  Cohen Account 
Warrants  for  evidence  related  to  certain  additional  conduct  that  was  not  thefoeus  of dhe  Trmr 
Cohen  Account  Warrants.  The  emails  obtained  from  the  Prior  Cohen  Account  Wauants  that  relate 
to  that  additional  conduct  do  not  form  a  basis  for  tire  instant  application. 
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responsive  materials  produced  pursuant  to  the  July  18  and  November  13, 2017  warrants  (the  “Prior 
Cohen  Account  Warrants”). 

9.  On  or  about  November  7, 2017,  and  January  4, 2018,  as  well  as  certain  prior  dates,  the 
SCO  sought  and  obtained  from  Judge  Howell  orders  authorizing  and  extendingthe  installation  and 
use  of  pen  registers  and  trap  and  trace  devices  to  record  communications  sent  to  or  from  the  Cohen 
Account  The  SCO  has  provided  pen  register  data  obtained  pursuant  to  those  orders  to  the  US  AO. 
This  affidavit,  as  discussed  below,  is  based  iu  part  on  my  review  of  the  pen  register  data  obtained 
pursuant  to  the  November  7,  2017  and  January  4, 2018  orders  (the  “Pen  Register  Data”). 

10.  On  or  about  February  16,  2018,  tire  USAO  sought  and  obtained  from  the  Honorable 
Debra  Freeman,  United  States  Magistrate  Judge  for  the  Southern  District  of  New  York,  an  order 
pursuant  to  18  U.S.C.  §  2703(d)  for  email  header  information  associated  with  the  MDCPC 
Account.  Tins  affidavit,  as  discussed  below,  is  based  in  part  on  my  review  of  email  header 
information  produced  by  1  &  1  in  response  to  that  order  (the  “MDCPC  Header  Information”). 

n.  Probable  Cause 
A.  Overview 

1 1 .  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  Y  ork  and  FBI  are 
investigating,  among  other  tilings,  a  scheme  by  Target  Subject  Michael  Cohen  to  defraud  multiple 
banlcs.  Cohen  is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  fur  President 
Donald  Trump,  and  who  previously  served  for  over  a  decade  as  an  executive  m  the  Trump 
Organization,  an  international  conglomerate  with  real  estate  and  otliei  holdings. 

12.  The  investigation  has  revealed  that  Cohen  has  made  affirmative  misrepresentations  in 
and  omitted  ,  material  information  from  financial  statements  and  oilier  disclosures  that  Cohen 
provided  to  multiple  banks  in  connection  with  a  transaction  intended  to  relieve  Cohen  of 
approximately  $22  million  in  debt  he  owed  on  taxi  medallion  loans  from  the  banks.  As  set  forth 
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in  detail  below,  in  these  financial  statements,  and  in  his  oral  and  other  written  statements  to  these 
banks,  Cohen  appeal's  to  have  (i)  intentionally  omitted  cash  assets  that  he  began  receiving  in  201 7 
from  new  consulting  work;  (ii)  significantly  understated  his  total  holdings  of  cash  and  cash 
equivalents;  and  (in)  failed  to  inform  the  banks  from  which  he  was  seeking  debt  relief  that  he  had 

agreed  to  make  a  $3.8  million  cash  payment  to  a  third  party, 

I  acquisition  of  the  taxi  medallions  securing  Cohen’s  debt.  By  making  these 
misrepresentations  and  material  omissions,  Cohen  avoided  making  monthly  payments  on  his 
loans,  and  attempted  to  and  had  secured  proposed  agreements  from  the  banks  to  relieve  him  of 


in  connection  with 


certain  repayment  obligations  worth  millions  ot  dollars, 

13.  Based  00  my  review  of  emails  obtained  from  the  Prior  Cohen  Account  Warrants, 
MDCPC  Header  Information,  and  documents  produced  pursuant  to  subpoenas,  I  have  learned  that 
Cohen  has  used  the  Cohen  Account  and/or  MDCPC  Account  to,  among  other  things,  (i) 

communicate  with  and  attome>' 

about  the  proposed  transfer  of  Cohen’s  medallions  and  associated  debts;  (ii)  negotiate  a  pay-down 


of  die  principal  amount  of  the  taxi  medallion  loans;  (hi)  communicate  with  his  accountant  about 
the  contents  oftiie  false  financial  statements  at  issue;  and  (iv)  send  those  false  financial  statements 
banks.  Additionally, 

Acco ml  |||^mBBIE^CCOUI d  an  ^^^|mcount,  respectively,  to  communicate  with  Cohen 
about  the  status  of  file  taxi  medallion  transaction,  and  to  send  relevant  financial  statements  to 
banks.  Accordingly,  and  as  set  forth  in  more  detail  below,  there  is  probable  cause  to  believe  that 


the  Subject  Accounts  will  include  evidence  of  the  Subject  Offenses. 

B,  Cohen’s  Statements  to  Sterling  National  Bank 

14.  As  set  forth  In  detail  below,  in  2014,  Colien,  through  limited  liability  corporations 

("LLCs”)  controlled  by  him  and  his  wife,  Laura  Cohen,  entered  into  a  series  of  loans  from  Sterling 
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National  Ba nk  (“Sterling”)  and  the  Melrose  Credit  Union  (“Melrose”),  secured  by  taxi  medallions, 
for  approximately  $20  million.  Though  entered  into  by  LLCs,  the  loans  were  also  secured  by 
personal  guarantees  in  tire  names  of  both  Cohen  and  his  wife.  Over  time,  as  the  taxi  industry 
weakened  and  the  medallions  were  devalued,  Cohen  sought  to  renegotiate  the  terms  of  those  loans 
and/or  relieve  himself  from,  then  obligations,  including  the  personal  guarantees.  As  part  of  that 
effort,  Cohen  made  a  series  of  representations  to  Sterling  and  Melrose  about  bi  s  net  worth,  assets, 
available  cash,  and  financial  outlook.  Specifically,  based  on  my  review  of  records  maintained  by- 
Sterling  and  Melrose,  and  public  sources  concerning  the  taxi  industry  and  the  value  of  taxi 
medallions,  as  well  as  my  review  of  reports  prepared  by  law  enforcement  officers  of  interviews 
with  a  Sterling  executive  vice-president  (the  “Sterling  Employee-T1)  and  my  participation  in  an 
interview  with  a  Sterling  employee  (the  “Sterling  Employee-2”),  I  have  learned,  among  other 
things,  the  following: 

a.  Taxi  medallions  are  small  metal  plaques  affixed  to  taxis.  Without  a  medallion,  it 
is  illegal  to  operate  a  taxi  in  cities  with  medallion  systems,  such  as  New  York  City.  Cohen  and  his 
wife  own  multiple  TXCs  that  collectively  own  32  taxi  medallions  (each  LLC  owns  two 
medallions).2  Cohen’s  purchase  of  these  New  York  taxi  medallions  was  originally  financed  by 
loans  from  Capital  One  Bank,  for  which  die  medallions  served  as  collateral.  Cohen  was  not  a  taxi 
operator,  and  leased  his  medallions  to  a  third  party.  That  third  party  made  monthly  payments  to 

Cohen,  who  in  turn  used  some  of  those  proceeds  to  pay  his  monthly  Imn  payments. 

■  <  L  1  .h  1 

b.  In  early  2014,  Cohen  became  a  customer  of  Sterling  when  he  sought  to  refinance  a 
mortgage  on  a  rental  property  that  he  owned.  In  or  around  April  2014,  Cohen  raised  with  Sterling 


2  One  of  these  companies.  Mad.  Dog  Cab  Corp.,  was  jointly  owned  by  Sondra  Cohen,  who  I 
believe  is  Cohen’s  mother. 
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the  prospect  of  refinancing  his  taxi  medallion  loans,  win  oh  were  then  at  Capital  One  Bank.  By  in 
or  about  September  2014,  Cohen  began  negotiating  a  lending  transaction  with  Sterling  that,  would 
allow  Cohen  to  pay  off  his  loans  at  Capital  One  and  boixow  more  money  from  the  then-increase  in 
value  of  the  medallions.  According  to  Sterling  Employee-!,  in  2014,  prior  to  the  recent  upheaval 
iu  the  taxi  industry— as  a  result  of  the  emergence  of  ride-sharing  services,  such  as  Uber  taxi 
medallion  loans  were  viewed  by  banks  and  investors  as  safe,  shortterm  credits,  as  the  market  value 
of  taxi  medallions  was  consistently  rising.  Consequently,-  taxi  medallion  loans  -like  the  loans  held 
by  Cohen— were  frequently  refinanced  at  increasing  amounts  as  the  value  of  the  medallions  rose. 
According  to  Sterling  Employee-1,  borrowers  typically  cashed  out  the  increase  in  the  loan  amount 
and  used  the  additional  funds  for  other  purposes.  Cohen  appears  to  have  followed  this  approach  m 
2014,  when  he  agreed  to  refinance  Iris  medallion  loans  for  approximately  $22  million,  which— 
according  to  letters  from  Capital  One-  Bank  in  Sterling’s  files— was  greater-  than  his  previous  debt 
at  Capital  One  Bank  ($21  million,  of  which  $14.6  million  was  a  line  of  credit  to  Cohen).  This 
allowed  Cohen  to  cash  out  the  proceeds  from  the  transaction. 

c.  Based  on  my  review  of  records  maintained  by  Sterling,  I  have  learned  that  on  or 
about  December  8,  2014,  each  of  Cohen’s  sixteen  taxi  medallion  corporations  entered  into  loan 
agreements  and  promissory  notes  with  Sterling  for  the  principal  sum  of  $1 ,375,000,  with  repayment 
due  on  December  8,  2016.  Each  loan  was  signed  by  Michael  or  Laura  Cohen,  depending  on  who 
was  the  sole  shareholder  of  the  corporation,  Tire  loans  were  also  each  secured  by  a  security 
agreement,  dated  the  same  day,  making  the  medallions  collateral  for  the  notes.  Io  give  Sterling 
additional  security,  Michael  and  Laura  Cohen  signed  personal  guarantees  and  confessions  of 
judgment,  giving  Sterling  the  right  to  pursue  collection  against  the  Cohens’  personal  assets  were 
their  corporations  to  default  under  the  loan  agreements.  In  total,  Sterling  agreed  to  lend 


02.2S.201 8 


10 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  17  of  73 


approximately  $22  million  to  the  Cohens’  companies.  Pursuant  to  participation  agreements, 
Sterling  transferred.  45  percent  of  that  debt  to  Melrose.3  Under  the  terms  of  Sterling’s  participation 
agreements  with  Melrose,  Sterling  was  precluded  from  amending  or  modifying  the  loans  without 
the  consent  of  Melrose. 

d.  In  evaluating  Cohen’s  requested  refinancing  of  the  taxi  medallions,  Sterling  (and 
Melrose,  consistent  with  its  participation  in  the  deal)  conducted  due  diligence.  At  Sterling  s 
request,  Cohen  provided  Sterling  with  a  statement  of  financial  condition,  dated  August  1,  2014 
(the  “August  2014  Financial  Statement”),  which  indicated  that  Cohen  had  $100,740,000  in  total 
assets,  $23,550,000  in  total  liabilities,  and  a  net  worth  of  $77,190,000. 4  From  my  review  of  a 
Sterling  credit  memorandum,  dated  September  29,  2014,  I  know  that  Sterling  viewed  the 
transaction  favorably  because,  accounting  for  loan  payments,  cash  flows  from  the  medallions  were 
projected  to  be  positive,  the  value  of  the  collateral  (as  estimated  by  Sterling)  exceeded  $42  million, 
and  the  net  worth  of  Cohen— who  was  the  direct  obligor  under  the  guarantee  agreements— was 
over  $77  million.  An  internal  Sterling  credit  and  risk  rating  analysis  report,  dated  October  20, 
2014,  recommended  approval  of  the  loans  for  substantially  the  same  reasons. 

e.  Based  on  my  review  of  records  maintained  by  Sterling  and  public  sources,  I  have 
learned  that  over  time,  the  collatera  l  backing  Cohen’s  loans  (taxi  medallions)  lessened  in  value  due 
to  the  rise  in  ride-sharing  companies  and  significant  devaluation  of  taxi  medallions.  Additionally, 
Cohen  began  falling  behind  on  loan  payments  to  Sterling  and  Melrose.  1  know  hum  records 
maintained  by  Sterling  and  an  interview  with  Sterling  Employee-2  that,  beginning  in  or  around 

3  Melrose,  which  had  a  business  principally  focused  on  taxi  medallion  loans,  is  now  in 
conservatorship  by  the  National  Credit  Union  Administration  ("NCUA”). 

4  Cohen  subsequently  provided  Sterling  with  a  revised  statement  of  financial  condition,  also 
dated  August  1, 2014,  which  reported  assets  of  $99,420,000,  total  Liabilities  of  $23,550,000,  and  a 
net  worth  of  $75,870,000. 
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September  2015,  Cohen  told  Sterling,  in  sum  and  substance,  that  the  individual  leasing  Cohen’s 
medallions  had  fallen  behind  in  making  payments  to  Cohen,  and  that  as  a  result,  the  monthly  cash 
flow  from  his  taxi  medallions  had  been  reduced,  leaving  him  with  a  shortfall  of  approximately 
$16,000  each  month.  For  instance,  I  have  reviewed  an  email  from  Sterling  Employee-2,  dated 
September  9, 2015,  summarizing  a  call  with  Cohen— which  according  to  the  email  and  toll  records 
for  Cohen’s  cellphone  occurred  on  September  8,  2015 — during  which  Cohen  told  Sterling 
Employee-2,  hi  sum  and  substance,  about  Iris  cash  flow  problems  and  a  -monthly  shortfall  of 
approximately  $16,000.  In  that  same  email,  Sterling  Employee-2  commented  that  despite  Cohen  s 
statements,  his  personal  financial  information  “indicate [d]  a  strong  ability  to  make  up  the  difference 
in  payments."  Cohen,  however,  according  to  Sterling  Employee-2,  pushed  the  bank  for  a  reduction 
in  Cohen’s  monthly  payments. 

f.  From  my  review  of  records  maintained  by  Sterling  and  my  participation  in  au 
interview  with  Sterling  Employee-2,  I  have  learned  that  Cohen  and  Sterling  Employee-2  spoke 
again  on  September  28, 2015,  and  that  during  the  call  Cohen  stated,  in  sum  and  substance,  that  the 
individual  to  whom  Cohen  leases  the  medallions  had  again  reduced  monthly  payments  to  Cohen.  I 
know  from  my  review  of  records  maintained  by  Sterling  that  between  in  or  about  September  2015 
and  November  2015,  Sterling  raised  the  possibility— both  internally  and  with  Cohen— of  Cohen 
posting  his  real  estate  holdings,  personal  residence,  or  some  other  collateral  as  additional  security 
for  the  banks .  According  to  these  records,  however,  Cohen  resisted  these  requests .  From  my  review 
of  loan  documents  and  records  maintained  by  Sterling,  I  know  that  in  or  about  November  2015,  as  | 

a  result  of  Cohen’s  representation  that  he  was  not  earning  sufficient  returns  on  his  medallions  to 
cover  monthly  interest  payments,  Sterling  and  Melrose  agreed  to  amend  then  loans  with  Cohen  by. 
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among  other  things,  reducing  the  interest  rate  Cohen  paid  to  Mekose  and  extending  the  loan 
maturity  date  to  December  8,  2017, 

g.  I  know  from  interviews  with  Sterling  Employee- 1  and  Sterling  Employee-2,  as  well 

as  emails  I  have  reviewed,  that  in  or  about  October  2016,  Cohen  told  Sterling  Employee- 1  that 
Cohen  had  a  potential  buyer  of  his  taxi  medallions,  who  would  agree  to 

assume  Cohen’s  debt  with  Sterling  and  Melrose.  Based  on.  my  review  of  records  maintained  by 
Sterling,  as  well  as  the  interviews- with;  Sterling  Employee-!  and  Sterling  Employee-2  referenced 
above,  I  know  that  by  or  before  October  201 6,  Cohen  had  entered  into  negotiations  to  sell  his  sixteen 
corporate  taxi  medallions  to  J  who  is  a  medallion  owner  and  taxi  operator,  for  the 

balance  of  the  loans,  which  at  the  time  was  $21,376,000.  I  know  from  my  review  of  records 
maintained  by  Sterling,  and  my  participation  in  an  interview  with  Sterling  Employee-2,  that  as  a 
condition  of  the  transfer  of  the  medallion  loans  and  because  Stei  ling  was  unfamiliar  with 

-Sterling  requested  that  Cohen  make  a  substantial  principal  payment  on  the  loan,  of 
approximately  one  million  dollars,  prior  to  the  transfer.  Cohen  rejected  this  request  initially.  But 
on  or  about  January  31,2017,  Cohen  told  Sterling  Employee- 1 ,  in  sum  and  substance,  that  he  would 
make  a  one  million  dollar  principal  reduction  payment  in  order  to  move  forward  with  the  medallion 
transfer  deal  witl^^^^^^J  Indeed,  in  an  email  sent  from  the  Cohen  Account  to  Sterling 
Employee-2  on  or  about  February  22, 2017,  Cohen  confirmed  that  he  “agreed  to  pay  down  1  million 
from  the  loan  amount.” 

h.  Pursuant  to  the  participation  agreements  between  Sterling  and  Melrose,  Sterling 

was  required  to  secure  Melrose’s  agreement  to  participate  in  the  transfer  of  the  taxi  medallion  debt 
&om  Cohen  to  On  or  about  April  17,  2017,  Sterling  sent  a  memorandum  to 

Melrose  summarizing  the  tenns  of  the  proposed  transaction,  and  noting  the  requirement  that 
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Melrose  agree  to  the  terms.  On  or  about  May  2,  2017,, 


.'emailed  Sterling 


Employee-]  from  the  | 

Sterling  Employee-!  responded  to 
Melrose  had  agreed  to  the  deal,  and  that  Sterling  would  be  sending] 


‘  Account  to  inquire  about  tire  status  of  the  transaction. 


Account  that 
term  sheet 


shortly. 

i.  In  order'  for  the  banks  to  evaluate  the  proposed  transaction  fully,  they  requested 
financial  information  from  the  parties.  On  or  about  October  26, 2016,  a  Sterling  employee  emailed 
Account  about  the  “Cohen  Medallion  Purchase,”  and  stated  “[i]n  order  to 
proceed  with  the  assumption  of  MichaePs  loans  Sterling  needed  certain  financial  information 

from  the  Account, 

al  jj-jj  Account,  that  he  would  send  a  financial  statement  and  tax 

returns  shortly.  Additionally,  on  or  about  June  7,  2017,  Sterling  Employee-1  emailed  Cohen  to 
request  an  “updated  personal  financial  statement,”  completed  jointly  with  Cohen’s  wife,  and 
Cohen’s  most  recent  federal  income  tax  return.  On  or  about  June  8,  20 1 7,  Cohen  emailed  Sterling 
Employee-1  from  the  Cohen  Account,  attaching  a  Sterling  personal  financial  statement  form  that 
had  been  filled  out  by  hand,  which  referenced  a  statement  of  financial  condition,  dated  May  1, 
2017  (the  “May  2017  Financial  Statement”),  that  was  also  attached.  Ihe  May  2017  Financial 
Statement  included  a  cover  letter  from  Cohen’s  accountant,  Jeffrey  Getzel,  stating,  in  sum  and 
substance,  that  die  information  in  the  statement  came  from  Cohen  and  that  Getzel  had  not 
confirmed  its  accuracy  or  completeness.  The  May  2017  Financial  Statement  stated  that  Coheu  had 
total  assets  of  $41,955,000,  total  liabilities  of  $39,130,000,  and  a  net  worth  of  $2,825,000.  The 
May  2017  Financial  Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in 
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cash,  $26)155,000  in  closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate 
holdings),  $3,200,000  in  real  estate  investments,  and  his  $1 1,000,000  personal  residence. 

j,  Based  on  my  review  of  reports  of  law  enforcement  interviews  of  Sterling 


Employee-1, 1  have  learned  that  Sterling  Employee- 1  reviewed  each  line  of  the  May  2017  Financial 
Statement  with  Cohen  to,  among  other  things,  verify  its  accuracy,  and  Sterling  Employee- 1  asked 
Cohen  about  the  cash  amount  listed  on  the  May  2017  Financial  Statement.  Cohen  stated  to  Stei  ling 
Employee-1,  in  sum  and  substance,  that  the  May  2017  Financial  Statement  was  accurate. 

k.  On  or  about  August  16,  2017,  Sterling  Employee-1  emailed  Cohen  at  the  Cohen 


Account  and 


at  the 


Account,  attaching  a  non-binding  term 


sheet  memorializing  the  potential  transaction  between  Sterling,  Melrose,  Cohen,  and 


On  or  about  August  29,  2017, 


| mailed  Sterling  Employee- 1  from  the| 

I .  and/or 


Account,  requesting  that  he  be  included  on  “all  future  e-mails  hi 

concerning  this  matter,”  and  providing  proposed  edits  to  the  term  sheet.  On  or  about 
August  30,  2017,  Steading  Employee-1  emailed  |  |at  the  | 

Account,  Cohen  at  the  Cohen  Account,  m\  rat  thej^lccount,  and  provided  them  with  a 


revised  term  sheet.  On  or  about  September  5,  2017,  Sterling  Employee-1  sent  | 


at  the 


Account,  Cohen  at  the  Cohen  Account,  an 
copy  of  the  executed  term  sheet.  According  to  the  term  sheet, 

$20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions  tha 
acquire  from  Cohen. 


it  thi 


Account  a 
would  borrow 
was  to 


1,  Aspartofthe  agreement,  accordi  ng  to  the  term  sheet,  $ 1 ,2 6 5 ,9 1 3  in  principal  { whi  ch 
is  what  would  remain  after  the  $20,000,000  payment  on  the  outstanding  loan  balance)  would  be 
repaid  by  Cohen  and  the  two  banks,  with  Cohen  paying  fifty  percent  and  the  banks  dividing  the 
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remaining  half  of  the  balance.  Based  on  my  review  of  an  internal  Sterling  credit  memorandum, 
dated  October  4, 2017,  the  parties  reached  a  preliminary  agreement  that  Cohen  would  pay  $632,956 
of  the  remaining  $1,265,912  principal  loan  balance,  and  Sterling  and  Melrose  would  absorb 
$357,1 67  and  $275,789  respectively  in  the  form  of  charge-offs.  According  to  Sterling  Employee- 
1,  Sterling  was  willing  to  divide  the  repayment  of  the  outstanding  principal  balance— despite  its 
prior  insistence  that  Cohen  make  a  principal  pay-down  of  at  least  one  million  dollars— because 
Cohen  represented  on  a  telephone  call  with  Sterling  Employee- 1,  in  sum  and  substance,  that  he  had 
insufficient  liquidity  to  pay  the  full  outstanding  principal  balance.  As  part  of  the  agreement.  Sterling 
and  Melrose  also  agreed  to  relieve  Cohen  and  his  wife  of  the  personal  guarantees  that  they  made 
on  behalf  of  the  LLCs.  Thus,  after  completing  tb^^^^Hransaction,  Cohen  would  no  longer 
have  had  any  outstanding  obligations  to  Sterling  or  Melrose. 

m.  Based  on  my  review  of  emails  sent  by  Sterling  employees,  I  have  learned  that 
because  the  transaction  between  the  parties  was  subject  to  Ml  credit  underwriting  by  Sterling  and 
Melrose  (as  well  as  Melrose3  s  regulators  at  NCUA),  in  August  and  September  2017,  Sterling 
required  and  requested  additional  financial  statements  for  Cohen  and  for  its  credit 

underwriting  process.  In  response  to  Sterling's  requests,  on  or  about  Octobei  5,  2017,  | 

Account  to  a  Sterling  employee  a  copy  of 
Biersonal  financial  statement.  The  financial  statement  lists  the 
Account  as  the  email  contact  fo;  Additionally,  on  or  about  October  5,  2017, 

Cohen,  using  the  Cohen  Account,  re-sent  Sterling  Employee-2  a  copy  of  Ms  May  2017  Financial 
Statement,  A  day  later,  on  October  6,  2017,  Cohen,  using  the  Cohen  Accoimt,  emailed  Sterling 
Employee-2  a  statement  of  financial  condition,  dated  September  30,  2017  (the  "September  2017 
Financial  Statement”), 
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n.  Like  the  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
included  a  cover  letter  from  Jeffrey  Getzel,  Cohen’s  accountant,  stating,  in  sum  and  substance,  that 
the  information  in  the  statement  came  from  Cohen,  and  that  Getzel  had  not  confirmed  its  accuracy 
or  completeness.  The  September  2017  Financial  Statement  stated  that  Cohen  had  total  assets  of 
$33,430,000,  total  liabilities  of  $45,630,000,  and  a  negative  net  worth  of  $12,200,000.  Notably, 
unlike  Cohen’s  May  2017  Financial  Statement,  the  September  2017  Financial  Statement 
represented  to  Sterling  that  Cohen  had  a  negative  net  worth.  The  September  2017  Financial 
Statement  indicated  that  Cohen’s  assets  were  comprised  of  $1,250,000  in  cash,  $17,630,000  in 
closely  held  companies  (such  as  the  taxi  medallion  entities  and  his  real  estate  holdings), 
$3,200,000  in  real  estate  investments,  and  his  $1.1,000,000  personal  residence  (which,  for  the  first 
time,  he  indicated  was  held  in  trust).  The  September  2017  Financial,  Statement  included  assets  and 
liabilities  not  held  in  Cohen’s  name,  such  as  various  entities  associated  with  his  taxi  medallions  and 
some' of  his  real  estate  investment  entities. 

o .  From  my  participation  in  ail  interview  with  Sterling  Employee-2,  and  my  review  of 
records  maintained  by  Sterling,  I  have  also  learned  that  at  or  around  the  tune  Cohen  provided 
Sterling  with  these  financial  statements— in  or  around  September  2017— Cohen  stopped  paymg 
monthly  loan  payments  on  his  taxi  medallion  loans  altogether.  According  to  Sterling  Employee- 
2,  Cohen  informed  Sterling,  in  sum  and  substance,  that  he  had  insufficient  funds  to  pay  the  monthly 
principal  and  interest  payments  on  his  medallion  loans.  By  in  or  about  December  2017,  Sterling 
and  Melrose  had  not  been  paid  approximately  $276,937.92  in  monthly  principal  and  interest 
"payments  on  the  medallion  loans.  Based  on  Cohen’s  financial  condition  as  conveyed  in  the 


5  Notably,  the  September  201 7  Financial  Statement  valued  each  of  Cohen’s  thirty-two  New 
York  taxi  medallions  at  approximately  $180,187.50,  whi^yjgro^i si der ably  less  than  the 


$650,000  valuation  ascribed  to  each  medallion  in  the  Cohen-] 


Iterm  sheet 
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September  2017  Financial  Statement,  and  his  delinquency  in  making  payments  to  Sterling,  among 
other  things,  the  bank’s  credit  underwriting  committee  determined  (and  memorialized  in  a 
December  2017  memorandum)  that  the  Cohen-^^^^^  transaction  was  favorable  for  the  bank 
-  that  is,  that  would  he  a  better  borrower  than  Cohen. 

p.  On  or  about  December  26,  2017,  Sterling  sent  Cohen  a  demand  letter  requesting 

the  immediate  receipt  of  past-due  loan  payments.  On  December  29, 2017,  Sterling  sent  Cohen  a 
letter  stating  that  he  was  in  default  under  the  loaus  between  Sterling  and  Cohen’s  medallion 
corporations.  Cohen  did  not  make  an  immediate  payment  on  the  loans,  but  instead  sent  an  e-mail 
to  Sterling  Employee- 1  on  or  about  January  24, 20 1 8,  from  the  Cohen  Account,  stating  that  during 
the  closing  of  the  Cohen>^^^|i  transaction,'  Cohen  would  "bring  all  payments  up  to  date  as 
well  as  deposit  the  payoff  differential.”  Cohen  also  requested  by  email  sent  from  the  Cohen 
Account  on  January  24,  2018,  that  at  tire  closing  of  the  Cohen  transaction,  Sterling 

provide  a  letter  stating  that  all  of  Cohen’s  debts  have  been  satisfied  and  that  Cohen’s  personal 
guarantees  of  the  medallion  loans  had  been  terminated. 

q.  The  Cohen  i  transaction,  however,  did  not  close,  On  or  about  January 

29, 2018,^^|  I  the  attorney,  emailed  attorneys  for  Sterling  from  thej^^^mcount 

and  stated  that  "at  this  time  there  is  no  deal  with  Michael  Cohen.  Some  of  the  numbers  have 
changed  and  we  are  not  prepared  to  go  forward.” 

r.  Based  on  my  participation  in  the  interview  with  Sterling  Employee-2  and  my 

review  of  records  maintained  by  Sterling,  I  know  that  alter  the  Coiiei  deal  fell  apart, 

Sterling  assigned  Cohen’s  loans  to  an  employee  at  Sterling  who  specializes  in  collecting  on 
defaulting  loans  ("Sterling  Employee-3”).  From  my  review  of  telephone  call  notes,  1  know  that 
Sterling  Employee-3  spoke  to  Cohen  on  or  about  January  30,  2018  about  paying  down  and/or 
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restructuring  Cohen's  outstanding  taxi  medallion  loans.  Based  on  my  review  of  an  email  between 
Sterling  Employee-3  and  Cohen,  1  know  that  on  the  January  30,  2018  call,  Cohen  stated  that  he 
would  send  a  “corrected  current”  version  of  his  personal  financial  statement,  Following  that  call, 
on  or  about  January  31,  2018,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen  Account  a 
copy  of  the  September  2017  Financial  Statement.  Later  that  day,  Cohen  again  emailed  Sterling 
Employee-3  from  the  Cohen  Account  and  proposed  paying  $500,000  to  bring  the  loans  current 
and  $750,000  to  bring  the  principal  balance  to  $20,500,000.  Cohen  also  suggested  revised  monthly 
interest  payment  amounts.  On  or  about  January  31,  2018,  Sterling  Employee-3  responded  to 
Cohen  at  the  Cohen  Account  and  stated,  in  sum  and  substance,  that  Cohen  would  need  to  pay  the 
entirely  of  the  overdue  payments  and  pay  down  the  principal  balance  of  the  loan  to  $20,000,000 
(in  total,  a  payment  of  approximately  $1,750,000),  and  would  need  to  make  larger  monthly  Intel  est 
payments. 

s.  On  or  about  February  1 , 20 1 8,  Cohen  emailed  Sterling  Employee-3  from  the  Cohen 
Account  and  proposed  “[pjayment  of  $  1,250m  which  ALL  can  be  used  to  pay  down  pi  incipal,  it 
[Sterling]  will  waive  past  due  amounts,”  but  stated  “I  do  NOT  have  more  than  the  $  1,250m.” 
(Emphasis  hi  original.)  Cohen  also  stated,  in  sum  and  substance,  that  he  had  insufficient  financial 
resources  to  post  additional  collateral  or  pre-fund  monthly  payments.  Based  on  my  participation 
in  an  interview  with  Sterling  Employee-2, 1  have  learned  that  Sterling  continues  to  renegotiate  the 
medallion  loans  with  Cohen  based  on  Cohen’s  representations  about  iris  current  financial  position. 
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C.  Cohen  Made  Material  Misrepresentations  About  His  Finances  to  Banks 

Cohen  Concealed  from  Sterling  and  Melrose  Cash  Derived  from  Consulting  Work 

15.  As  set  forth  in  detail  below,  despite  multiple  representations  by  Cohen  to  Sterling  (and, 
by  extension,  Melrose6)  that  he  had  insufficient  funds  to  pay  down  the  principal  balance  of  the 
medallion  loans,  malce  monthly  interest  payments,  or  pay  past-due  amounts,  it  appears  that 
between  2016  and  the  present,  Cohen  opened  and  maintained  bank  accounts  at  First  Republic  Bank 
(“First  Republ  ic”),  and  then  received  millions  of  dollars  in  purported  consulting  payments  in  these 
accounts,  which  he  did  not  disclose  to  Sterling.  Coken  set  up  these  accounts  and  received  these 
funds  during  the  very  period  in  which  he  made  disclosures  to  Steii  ing  about  his  personal  finances 
(including  his  assets  and  liabilities)  and  his  ability  to  make  payments  on  the  medallion  loans.  In 
these  disclosures  to  Sterling — and  despite  being  asked  about  these  bank  accounts  by  his 
accountant — Cohen  wiflilield  information  about  liquid  financial  assets  at  First  Republic. 

16.  Specifically,  based  on  my  review  of  documents  and  bank  records  produced  pursuant  to 
a  subpoena  by  First  Republic,  and  my  participation  in  and  review  of  reports  of  interviews  with  two 
First  Republic  employees,  I  have  learned,  among  other  things,  the  following: 

a.  Cohen  and  his  wife  have  been  customers  of  First  Republic  since  approximately 
June  2011.  Cohen  controls  several  checking  and  loan  accounts,  some  in  his  own  name  and  others 
in  the  names  of  corporate  entities, 


6  Based  on  my  review  of  a  report  of  an  interview  conducted  with  an  employee  of  Melrose,  1 
have  learned  that,  pursuant  to  the  participation  agreement  between  Sterling  and  Melrose,  Cohen’s 
financial  statements  and  other  records  in  Sterling’s  possession  were  forwarded  to  that 

Melrose  could  make  a  determination  as  to  whether  to  approve  of  the  Coher 
transaction.  Based  on  ray  review  of  reports  of  interviews  with  Melrose  employees,  I  also  know 
that  Cohen  called  employees  at  Melrose  regarding  the  Coher| 


I  transaction. 
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b.  On  or  about  October  26,  2016,  in  Manhattan,  New  York,  Cohen  opened  a  new 
checking  account  at  First  Republic  in  tire  name  of  Essential  Consultants  LLC  (tire  “Essential 
Consultants  Account”).  Cohen  was  the  only  authorized  signatory  on  the  account  When  Cohen 

Tmh'  i  I 

opened  the  Essential  Consultants  Account,  a  First  Republic  employee  (“First  Republic  Employee- 
1”)  conducted  an  in-person  interview  of  Cohen.  In  response  to  a  series  of  know-your-customer 
questions7 8  about  the  purpose  of  the  account-the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form®- — -Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  lor  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Cohen 
also  stated,  hr  sum  and  substance,  that  his  purpose  in  setting  up  the  account  was  to  keep  the  revenue 
from  his  consulting  business — which  he  said  was  not  his  main  source  of  income  separate  from 
his  personal  finances.  As  set  forth  below,  there  is  probable  cause  to  believe  that  Cohen3  s 
statements  about  the  intended  purpose  of  the  account  and  source  of  funds  for  the  account  were 
false.  Specifically,  the  account  was  not  intended  to  receive — and  does  not  appear  to  have 
received — money  in  connection  with  real  estate  consulting  work;  in  addition,  the  account  has 

received  substantial  payments  from  foreign  sources. 

c.  Fust,  on  or  about  October  27,  2016— the  day  after  he  opened  the  Essential 
Consultants  Account,  Cohen  used  the  account  to  wire  $130,000  to  an  account  held  in  the  name  oi 
attorney  Keith  Davidson’s  law  firm.  Based  on  my  review  of  emails  between  Cohen  and  Davidson, 


7  Certain  financial  institutions  are  required  to  conduct  such  procedures  pursuant  to  the  Bank 
Secrecy  Act  and  its  implementing  regulations.  See  31  U.S.C.  §  5318;  31  C.F.R.  §  1020,220. 

8  First  Republic  Employee-1  first  filled  out  the  form  on  the  day  he  interviewed  Cohen,  October 
26,  2016.  On  or  about  December  19,  2016,  at  the  request  of  bank  compliance  personnel.  First 
Republic  Employee- 1  updated  the  form  to  add  more  detail  about  Cohen’s  statements. 
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obtained  pursuant  to  the  Prior  Cohen  Account  Warrants,  I  believe  that  tins  payment  did  not  relate 
to  any  real  estate  consulting  work,  but  lather  was  a  “settlement”  payment  made  to  Davidson’s 
client.  9  Based  on  my  review  of  public  sources,  I  have  learned  that  Davidson’s  client  is  alleged  to 
have  had  an  extramarital  affair  with  Donald  Tramp.  On  or  about  February  13, 20 1 8,  Cohen  made 
a  public  statement  that  “[i]n  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to 
facilitate  a  payment  of  $130,000  to  [Davidson’s  client].” 

d.  Second,  T  know  from  my  review  of  First  Republic  bank  records  that  were  scheduled 
by  an  FBI  forensic  accountant  that  after  Cohen  opened  the  Essential  Consultants  Account,  Cohen 
received  payments  into  that  account  from  foreign  businesses  and  entities  that  do  not  reflect  the 
stated  client  profile  for  the  residential  and  commercial  real-estate  consulting  services.  Specifically, 
from  my  review  of  the  Essential  Consultants  Account  schedule  and  public  sources,  I  know  the 
following; 

i.  Beginning  on  or  about  January  3 1,  2017,  Cohen  began  receiving  monthly 
payments  of  $83,333  from  an  entity  called  Columbus  Nova  LLC,  which  were  deposited  into  the 
Essential  Consultants  Account.  According  to  public  sources,  Columbus  Nova  is  an  investment 
management  firm  controlled  by  Renova  Group,  an  industrial  holding  company  based  in  Zurich, 
Switzerland  that  is  controlled  by  Russian  national  Viktor  Vekselberg.  From  January  2017  to 
August  2017,  the  Essential  Consultants  Account  received  seven  payments  totaling  $583,332.98 
from  Columbus  Nova  LLC. 


9  Specifically,  I  have  learned  from  my  review  of  bank  records  that  on  or  about  October  26, 
2016,  Cohen  transferred  $131,000  from  a  home  equity  lure  of  credit  account  at  First  Republic  to 
tire  Essential  Consultants  Account;  on  or  about  October  27,  2016,  Cohen  transferred  $130,000 
from  the  Essential  Consultant  Account  to  an  account  held  in  the  name  of  Davidson’s  law  firm  at  a 
bank  based  in  Los  Angeles;  and  on  or  about  November  1,  201 6,  a  wire  transfer  hi  the  amount  of 
approximately  $96,645  was  made  from  Davidson’s  account  to  a  baric  account  in  the  name  of 
Davidson’s  client. 
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ii.  Beginning  on  or  about  April  5, 2017,  Cohen  began  receiving payments  from 
Novartis  Investments,  BAKU  which  I  believe  to  be  the  in-house  financial  subsidiary  of  the  Swiss 
pharmaceutical  company  Novartis  International  AG  (“Novartis”),  Between  April  201 7  and  January 
20 IS,  the  Essential  Consultants  Account  received  ten  wire  payments  from  a  Swiss  bank  account 
held  hi  the  name  of  Novartis,  each  in  the  amount  of  $99,980,  for  a  total  of  $999,800. 

hi.  Beginning  in  or  about  April  2017,  the  Essential  Consultants  Account  started 
receiving  wire  payments  from  a  bank  account  associated  with  die  telecommunications  company 
AT&T  Inc.  (“AT&T”).  Specifically,  on  or  about  April  14,  2017,  AT&T  wired  $100,000  to  the 
Essential  Consultants- Account  and,  from  in  or  about  .June  2017  to  hi  or  about  January  2018,  fire 
Essential  Consultants  A  ccount  received  nine  $50,000  payments  from  AT&T,  hi  total,  AT&T  wired 
$550,000  to  the  Essential  Consultants  Account. 

iv.  On  or  about  May  1 0,  20 1 7,  June  9, 2017,  July  10,  201 7,  and  November  27, 
2017,  the  Essential  Consultants  Account  received  four  deposits  in  die  amount  $150,000  (totaling 
$600,000)  from  a  bank  account  in  South  Korea.  The  account  holder  from  which  the  money  was 
sent  is  Korea  Aerospace  Industries  Ltd.  (“KA1”).  KAI  is  a  South  Korea-based  company  that 
produces  and  sells  fixed-wing  aircraft,  helicopter  aircraft,  and  satellites  to  the  United  States 
Department  of  Defense,  among  other  customers. 

v.  On  or  about  May  22,  2017,  the  Essential  Consultants  Account  received  a 
$150,000  deposit  from  an  account  at  Kazkommeitsbank,  a  Kazakhstani  bank.  The  listed  account 
holder  at  Kazkommertsbank  was  a  second  Kazakhstani  bank  named  BTA  Bank,  AO.  A  message 
accompanying  the  wire  payment  indicated  that  the  payment  was  a  “monthly  consulting  tee  as  pei 
Inv  BTA- 101  DD  May  10,  2017  consulting  agreement  W/N  DD  08  05  2017  CNTR  W/NDD 
08/05/2017.” 
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vi.  In  total,  from  on  or  about  January  31,  2017  to  ou  or  about  January  10, 2018, 
the  Essential  Consultants  Account  recei  ved  approximately  $2,883,132,98  in  transfers  and  checks 
from  the  aforementioned  entities.  As  of  on  or  about  January  1 0, 2018,  the  balance  iti  the  Essential 
Consultants  Account  was  $1,369,474,23. 

e.  On  or  about  April  4,  2017,  Cohen  opened  another  new  checking  account  at  Fust 
Republic,  tills  one  in  the  name  of  Michael  D.  Cohen  &  Associates,  P.C,  (the  “MDC&A  Account5’). 
Cohen  was  the  only  authorized  signatory  on  the  account.  Among"  other  tilings,  the  MDC&A 


Account  received  ten  wire  transfers  and  one  check  from  an  account  in  the  name  of  Squire  Patton 
Boggs,  a  law  firm.  In  total,  from  on  or  about  April  5,  2017,  to  on  or  about  January  2,  2018,  the 
MDC&A  Account  received  $426,097.70  in  deposits,  and  the  balance  in  the  account  as  of  January 
2,  2018,  was  $344,541.35.  As  discussed  below,  Cohen  never  disclosed  any  of  the  balance  in  the 
Essential  Consultants  or  MDC&A  accomits  to  Sterling  during  the  negotiations  with  respect  to  the 
transaction,  including  in  his  May  2017  Financial  Statement  and  September  2017 
Financial  Statement. 

17.  Based  on  my  review  of  emails  from  the  Cohen  Account  that  were  seized  pursuant  to 
the  Prior  Cohen  Account  Warrants,  and  my  review  of  reports  of  interviews  with  employees  of 
AT&T  and  Novartis,  it  appears  that  the  aforementioned  payments  to  the  Essential  Consultants 
Account  and  MDC&A  Account  ostensibly  were  for  political  consulting  work,  including  consulting 
for  international  clients  on  issues  pending  before  the  Trump  administration. lu  Specifically,  from 
my  review  of  emails  from  the  Cohen  Account  and  public  sources,  I  have  learned  the  following: 


10  Based  on  my  review  of  public  sources,  I  have  learned  that  Cohen  is  not  registered  as  a 
lobbyist  or  as  a  person  acting  as  an  agent  of  foreign  principals,  as  may  have  been  required  by  the 
Foreign  Agents  Registration  Act. 
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a.  Oji  or  about  April  28,  2017,  Cohen  sent  an  email  from  the  Cohen  Account  to  an 
individual  whom  I  believe  is  affiliated  with  KAL  In  the  email,  Cohen  attached  a  document 
purporting  to  be  a  “Consulting  Agreement"  between  KAI  and  Essential  Consultants  dated  as  of 
about  May  1, 2017.  The  document  indicates  that  Essential  Consultants  would  render  “consulting 
and  advisory  services,  as  requested”  by  KAI,  and  that  KAI  would  pay  Essential  Consultants  “a 
consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000,00)  US  Dollars,”  disbursed 
through  eight  $150,000  installments  between  May  2017  and  December  2017. 

b.  On  or  about  May  10,  2017,  Cohen  sent  an  email  from  an  alternate  email  address, 
copying  the  Cohen  Account,  to  an  employee  of  BTA  Bank.  To  the  email,  Cohen  attached  an 
invoice  to  BTA  Bank  in  the  name  of  Essential  Consultants,  The  invoice  contemplated  a  $150,000 
payment  to  Essential  Consultants  for  a  “monthly  consulting  fee." 

c.  On  or  about  February  13, 2017,  Cohen  emailed  an  AT&T  employee  from  the  Cohen 
Account  what  appears  to  be  a  consulting  agreement,  which  contemplates  that  Essential  Consultants 
“shall  render  consulting  and  advisory  services  to  [AT&T]”  and  that  AT&T  would  “advise  [Essential 
Consultants]  of  those  issues  and  matters  with  respect  to  which  AT&T  Services  desires  [Essential 
Consultants]^  assistance  and  advice.”  The  contract  calls  for  AT&T  “to  pay  the  Consultant  for  Iris 
services  ...  a  consulting  fee  of  Fifty  Thousand  ($50,000)  Dollars  .  ,  .  per  month.”  Based  on  my 
review  of  reports  of  interviews  with  AT&T  employees,  I  have  learned  that  AT&T  retained  Cohen 
to  consult  on  political  issues,  including  net  neutrality,  the  merger  between  AT&T  and  Time  Warner, 
and  tax  reform. 

d.  On  or  about  January  17,  2017,  Cohen  emailed  to  a  representative  of  Novartis  from 
die  Cohen  Account  a  contract  between  Novartis  and  Essential  Consultants,  which  provides  that 
Essential  Consultants  will  “provide  consulting  and  advisory  services  to  Novartis  on  matters  that 
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relate  to  the  repeal  and  replacement  of  the  Affordable  Care  Act  in  the  US  and  any  other  issues 
mutually  agreeable  to  [Essential  Consultants]  and  Novartis.”  The  contract  provides  for  a 
“consulting  fee  of  One  Million  Two  Hundred  Thousand  ($1,200,000)  US  dollars,”  to  be  paid  to 
Essential  Consultants  in  even  monthly  installments  over  the  course  of  a  year.  Based  on  my  review 
of  reports  of  interviews  with  Novartis  employees,  I  have  learned  that  Novartis  retained  Cohen  to 
provide  political  consulting  services  and  to  gain  access  to  relevant  policymakers  in  the  Trump 
Administration. 

e.  On  or  about  April  3,  2017,  Squire  Patton  Boggs,  a  law  film,  announced  on  its 
website  that  is  had  formed  a  “strategic  alliance”  with  Michael  D.  Cohen  &  Associates  and  would 
"jointly  represent  clients.’'' 

IS. Despite  the  significant  amount  of  money  that  Cohen  received  into  the  Essential 
Consultants  Account  and  the  MDC&A  Account,  and  the  cash  balance  in  both  accounts,  Cohen  did 
not  disclo  se  that  information  to  Sterling  or  Melrose.  Specifically,  based  on  my  review  of  documents 
provided  by  Getzel,  and  my  review  of  notes  anc| 
have  learned  the  following; 

a  In  or  about  May  2017,  Getzel  met  with  Cohen  at  a  law  firm  in  Manhattan,  New 

'V,  A 

York.  At  the  meeting,  Cohen  told  Getzel,  in  slum  and  substance,  that  he  had  set  up  a  law  practice 

! : i'  '  ■  ■'  '  |  r' 

called  Michael  D.  Cohen  &  Associates  P.C.,  and:  a  consulting  company  called  Essential  Consultants 


LLC.  Coheu  told  Getzel,  in  sum  and  substance,  that  he  expected  to  earn  $75,000  per  month  in 
connection  with. his  law  practice,  and  that  he  expected  gross  revenues  for  the  consulting  business  to 
be  between  five  and  six  million  dollars  annually. 

b.  In  or  about  October  2017,  if  not  earlier,  Getzel  was  preparing  a  personal  financial 
statement  for  Cohen.  On  or  about  October  6,  2017,  Getzel  sent  an  email  to  Cohen  at  the  Cohen 
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Account  in  which  Getzel  wrote  that  “[ajttached  is  a  draft  of  the  new  P?  S  as  ot  September  3  0, 20 1 7 
and  attached  a  draft  of  the  September  2017  Financial  Statement  The  draft  statement  reflected  that 
as  of  September  30,  2017,  Cohen  had  only  $1,250,000  in  cash,  total  assets  of  approximately 
$33,430,000  (comprised  of  taxi  medallion  interests,  real  estate  interests,  and  lus  personal  residence 
and  property),  and  liabilities  of  approximately  $45,630,000,  leaving  him  purportedly  over  $12 
million  in  debt,  hr  the  same  email,  Getzel  questioned  Cohen,  in  sum  and  substance,  about  the  fact 
that  the  financial  statement  did  not  list  any  assets  associated  with  either  the  Essential  Consultants 
Account  or  the  MDC&A  Account:  “[w]e  did  not  add  any  value  for  you[r]  two  operating  entities  - 
Michael  D,  Cohen  &  Associates  POC  [Ac]  and  Essential  Consultants  LLC.  Please  advise  whether 
or  not  these  should  be  disclosed  and  what  value.” 

c.  On  or  about  October  6, 20 1 7,  Cohen  called  Getzel  by  telephone— which  is  reflected 
on  toll  records  for  Cohen’s  cellphone — -and  told  Getzel,  in  sum  and  substance,  not  to  include 
Essential  Consultants  or  MDC&A  in  the  September  2017  Financial  Statement  because  they  had  no 
value. 

d.  On  or  about  October  6, 2017,  following  the  call  with  Getzel,  Cohen,  using  the  Cohen 
Account,  responded  to  Getzel’ s  email  with  the  answer  "fljoolts  good  to  me”  Cohen  never  directed 
Getzel  to  make  any  changes  to  bis  cash  position  as  listed  in  the  September  2017  Financial 
Statement.  Neither  Essential  Consultants  nor  MDC&A  was  listed  on  the  September  2017  Financial 
Statement  that  was  provided  to  Sterling. 

19.  Based  on  the  foregoing,  and  from  my  review  of  bank  records  and  emails  sent  by  Cohen 
to  Sterling,  I  know  that  the  September  2017  Financial  Statement  made  no  mention  whatsoever  of 
assets  that  Cohen  held  in  the  Essential  Consultants  Account  or  the  MDC&A  Account.  As  of 
September  30,  2017— the  date  of  the  September  2017  Financial  Statement— Cohen  had 
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approximately  $673,729.95  in  the  Essential  Consultants  Account  and  $248,619.23  in  the  MDC&A 
Account.  As  of  October  6, 2017,  tire  date  when  Getzel  asked  Cohen  about  the  two  accounts,  Cohen 
had  approximately  $823,709.95  in  the  Essential  Consultants  Account  and  $248,619,28  in  the 
MDC&A  Account. 

Cohen  Understated  His  Available  Cash 

20.  In  addition  to  withholding  the  existence  of  the  Essential  Consultants  Account  and  the 
MDC&  A  Account  from  Sterling  and  Melrose,  it  appears  that  Cohen  also  substantially  understated 
his  available  cash  and  cash  equivalents  in  his  financial  disclosures.  Specifically,  I  know'  from  my 
review  of  the  September  2017  Financial  Statement  that  Cohen  provided  to  Sterling  that  Cohen 
represented  that  he  had  $1,250,000  in  cash  as  of  September  30,  2017.  But,  from  my  review  of  a 
summary  of  bank  records  that  were  scheduled  by  an  FBI  forensic  accountant,  I  have  learned  that 
Cohen  had  over  $5,000,000  in  cash  and  cash  equivalents  as  of  September  30,  2017.  Specifically, 
from  ray  review  of  the  account  schedule  and  bank  records,  I  have  learned  the  following; 

a.  Cohen  has  three  checking  and/or  savings  accounts  at  Capital  One  Bank,  one  of 
which  is  hr  his  wife’s  name.  As  of  September  30,  2017,  Cohen  had  $1,105,680.35  in  his  savings 
account,  and  $1,262,982.29  in  total  in  the  three  accounts  at  Capital  One  Bank. 

b.  Cohen  has  three  accounts  at  Morgan  Stanley  in  his  name.  As  of  September  30, 
2017,  the  combined  total  in  cash  and  cash  equivalents  in  those  three  accounts  was  $1,270,600,41. 

e.  As  of  September  30, 20 1 7,  Cohen  had  $260,6  89 . 1 8  in  an  account  at  Signature  B  ank. 

d.  In  addition  to  the  Essential  Consultants  Account  and  MDC&A  Account  at  First 
Republic,  Cohen  also  had  two  joint  checking  accounts  with  Laura  Cohen  at  First  Republic.  In  total, 
as  of  September  30,  2017,  Cohen  had  at  least  $1,876,209.27  in  total  in  bis  four  accounts  at  First 
Republic. 
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e.  Cohen  has  an  account  at  Bethpage  Credit  Union  with  $25,931.39  in  it  as  of 
September  30,  2017, 

f.  As  of  September  30,  2017,  Cohen  had  $17,542.54  in  accounts  at  Sterling. 

g.  Cohen  has  two  accounts  at  TO  Bank — one  in  his  name  and  one  held  jointly  with  his 
wife— and  die  total  balance  across  the  two  accounts  as  of  September  30,  2017  was  $300,096.72. 

h.  hi  total,  as  of  September  30, 2017,  Cohen  had  at  least  $5,0 14,05 1 .80  in  Ills  accounts 
at  Capital  One  Bank;  Signature  Bank,  TO  Bank,  Bethpage  Credit  Union,  First  Republic,  and 
Morgan  Stanley. 

21 ,  Accordingly,  based  on  the  foregoing,  it  appears  that  Cohen’s  representations  to  Sterling 
and  Melrose  that  he  did  not  have  more  than  $1,250,000  were  false,  and  that  Cohen  withheld 
information  regarding  approximately  $5  million  in  funds  from  Sterling  and  Melrose,  in  order  to 
secure  favorable  terms  in  his  renegotiation  of  his  medallion  loan.  Based  on  my  participation  in  an 
interview  with  Sterling  Employee-2,  and  my  review  of  reports  of  interviews  with  Sterling 
Employee- 1  and  two  Melrose  employees,  it  is  my  understanding  that  that  Sterling  and  Melrose 
would  view  Cohen’s  understating  of  his  assets  as  material  to  its  decision  whether  to  renegotiate 
Cohen’s  medallion  loans  and  on  what  terms,  or  approve  of  tire  transfer  of  those  loans  to 


Cohen  Had  a  Side  Agreement  With 


22.  As  set  forth  in  detail  below,  it  appears  that  during  the  course  of  Cohen’s  negotiations  to 
sell  his  interest  in  taxi  medalLions  and  die  associated  debt  to  Cohen  not  only 

misrepresented  bis  financial  position  to  Sterling,  but  also  failed  to  disclose  a  side  deal  he  had 
negotiated  with  it  appeal's  diat  agreed  to  pay  an  above-market  price  for 


Cohen’s  taxi  cab  medallions,  and  in  exchange,  Cohen  agreed  to  pa 


pproximately 
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$3.8  million  in  cash.  Specifically,  from  my  review  of  documents  produced  pursuant  to  a  subpoena 
by  Sterling,  and  reports  prepared  by  law  enforcement  officers  of  interviews  with  Sterling 
Employee-1,  as  well  as  my  participation  in  an  interview  with  Sterling  Employee-2, 1  have  learned, 
among  other  things,  the  following: 

a.  On  or  about  September  5,  2017,  an  executed  term  sheet  was  circulated  by  Sterling 

Employee- 1  to  Cohen  and  See  supra  $  14(k).  According  to  the  term  sheeir  | 

would  borrow  $20,000,000  from  Sterling  and  Melrose,  to  be  secured  by  the  medallions 
1  hal  /as  to  acquire  from  Cohen.  At  a  price  of  $20  million  for  thirty-two  taxi  meda  llions, 

the  proposed  transaction  valued  each  medallion  as  worth  $625,000.  The  term  sheet  also 
contemplated  a  $  1 ,265 ,9 1 3  pay-down  of  the  principal  balance  of  the  loan.  The  term  sheet  made  no 
mention  of  a  $3.8  million  payment  from  Cohen  to  or  any  other  form  of  payment  or 

financial  transaction  between  the  parties. 

b.  Additionally,  an  internal  Sterling  credit  memorandum,  dated  October  4,  2017, 
describing  the  terms  of  the  Cohen-^^^^^fhansaction  and  tire  new  loan 

not  mention  any  payments  from  Cohen  to  including  a  $3,8  million  payment.  The 

memorandum  also  noted  that  the  “loan  amount  of  $20MM  indicates  a  $625M  purchase  price  per 
medallion”  but  “it  is  recognized  that  this  is  not  in  line  with  current  market  values.”  Indeed, 
according  to  an  internal  Sterling  memorandum  dated  February  5,  2018,  iu  the  month  of  January 
2018,  taxi  medallions  sold  for  amounts  ranging  from  $120,000  to  $372,000.  According  to  Sterling 
Employee-)  and  Sterling  Employee-2,  they  were  never  told.  tha^^^^^J  agreed  to  a  purchase 
price  of  $625,000  in  exchange  for  a  lump  sum  payment  from  Cohen,  or  that  Cohen  would  make 
any  payment  to 
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23.  While  Cohen  and  |  |did  not  disclose  any  payment  from  Cohen  to 

|* |in  communications  with  Sterling,  it  appears  that  such  a  payment  was  contemplated. 

Indeed,  based  on  my  review  of  records  maintained  by  Getzel,  and  a  report  prepared  by  law 
enforcement  agents  of  an  interview  with  Getzel,  I  have  learned  the  following,  in  substance  and  in 
part,  regarding  the  proposed  side-payment  from  Cohen  t| 

a.  On  or  about  September  19,  2017,  Getzel  prepared  a  memorandum  for  Cohen 
entitled,  “Sale  of  NYC  Medallion  Entities  and  Debt  Assumption”  (the  "Getzel  Memorandum”). 
The  Getzel  Memorandum  summarized  the  proposed  transaction  between  Cohen  and  J 

in  part,  as  follows:  "Michael  and  Laura  Cohen  will  transfer  ownership  of  their  13  NYC  medallion 
entities  to  a  Buyer  who  will  assume  their  bank  indebtedness,  upon  the  [Cohens’ )  paying  down  tire 
debt  portfolio  of  the  13  entities  by  $500,000  and  a  cash  payment  to  the  Buyer  of  $3,800,000.” 1 1 

b,  According  to  Getzel,  Cohen  told  him  the  parameters  of  the  deal,  including  the 

payment  of  $3,800,000  1  it  Getzel  did  not  know  where  Cohen  was  going  to  obtain 

$3,800,000  to  As  noted  above,  Cohen  had  more  than  $5,000,000  in  cash  and 

cash  equivalents  as  of  September  2017,  but  had  only  disclosed  in  his  September  2017  financial 
Statement  that  he  had  $1 .25  million  in  cash. 

24.  Based  on  my  review  of  records  maintained  by  Sterling  (as  well  as  Melrose,  the  bank 

with  the  participating  interest  in  the  loans)  and  reports  of  interviews  of  representatives  of  Sterling 
(and  Melrose),  I  have  seen  no  evidence  that  Sterling,  Melrose,  or  any  other  financial  institution 
involved  in  the  potential  deal  with  Cohen  and  Was  aware  of  the  planned  $3.8  million 

side  payment  from  Cohen  t 


1 1  The  reference  to  thirteen  medallions  appears  to  be  an  error  by  Getzel.  Cohen  and  his  wife 
together  owned  sixteen  corporations,  which  in  turn  owned  32  taxi  medallions. 
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D.  Probable  Cause  Regarding  the  Subject  Accounts 

25.  As  set  forth  above,  since  at  least  September  2015,  if  not  earlier,  Cohen  has  told  Sterling 
that  he  has  difficulty  making  payments  on  his  medallion  loans  and,  since  at  least  October  2016, 
Cohen  has  been  actively  engaged  in  an  attempt  to  sell  his  taxi  medallions  and  the  associated  debts 
n  In  the  c our’s e  of  doing  so,  Cohen  has  used  the  Cohen  Account  and/or  MDCPC 

Account  to  engage  in  email  communications  regarding  the  terms  of  the  transactions  and  the 
-  undisclosed-  side-payment  with  J  |  at  the  |  |  Account;— | 

at  Account,  an  at the^^^iccount.  Specifically, 

as  described  above,  there  is  probable  cause  to  believe  that  the  Subject  Accounts  have  been  used 
regarding  the  proposed  Cohcr^^^^^  transaction  with  Sterling; 

a.  Cohen  has  used  the  Cohen  Account  to,  among  other  things,  negotiate  a  pay-down 
of  the  principal  amount  of  the  loan,  see  supra  )]  14(g),  to  send  term  sheet  s  to  Sterling,  see  supra  ^ 
1 4(j),  to  communicate  with  his  accountant  about  the  contents  of  financial  statements,  see  supra  j[ 
16,  to  send  financial  statements  to  Sterling,  see  supra  If  14(1),  (1),  to  check  on  the  status  of  the 
transaction  as  of  January  24,  2018,  see  supra  H  14(n),  to  negotiate  a  reduction  of  his  debt  with 
Sterling  on  or  around  January  31,  2018,  see  supra  If  14(o),  to  tell  Sterling  on  February  1,  2018,  he 
does  not  have  the  ability  to  pay  more  than  $1,250,000,  see  supra  If  14(p),  and  to  communicate  with 
individuals  responsible  for  sources  of  payment  s  to  the  Essential  Consultants  Account,  see  supra  ^ 
15.  In  other  words,  from  the  communications  described  above,  it  appears  likely  that  the  Cohen 
Account  will  contain  recent  evidence  of  the  Subject  Offenses,  including  communications  and 
potential  misrepresentations  to  Sterling,  and  evidence  indicating  that  statements  made  to  Sterling 
are  false  or  misleading. 

b,  ias  used  the  to  communicate 

the  proposed  taxi  medallion  transaction  with  Cohen,  which  appeal’s  to  have  been  discussed  as  early 
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as  October  2016.  See  supra  <[  14(g).12  Specifically,  as  described  above,  as  early  as  May  2,  20 1 7, 
.used  the  account  to  inquire  about  the  status  of  the  transaction* 

see  supra  If  14(h) .  He  used  th|  [Account  to  exchange  drafts  of  the  proposed  tenn 

sheet  with  Cohen^',  and  Sterling,  see  supra  H  14®.  ccunnt  was  also 

used  by  o  send  a  personal  financial  statement  Sterling, 

see  supra  If  1 4(1).  The  Account  was  copied  on  emails  from  the 

Account  about  the  transaction,  see  supra~\  T4(i),  and  was  listed  on  1  financial 

statement  as  the  contact  email  ini  7  see  supra  If  1 4(m).  Additionally,  based  on  my 

review  of  MDCPC  Header  Information,  I  know  that  on  or  about  September  1,  2017— at  or  around 

the  time  Cohen  were  negotiating  a  term  sheet— | _ 

I,  Account  to  send  and  receive  eight  emails  from  Cohen  at  the  MDCPC  Account. 

0i  has  used  tb^^|  Account  to  communicate  with  Sterling  employees,  Cohen, 

juU|  about  the  proposed  taxi  medallion  transaction  since  at  least  December  2016. 

See  supra  14(g),  24(c).  Specifically,  on  or  about  August  29,  2017, .  told  Sterling  that  he 
should  be  included  on  “all  future  e-mails”  involving  the  proposed  transaction,  see  supra  If  14®. 
Additionally,  was  involved  in  malting  revisions  to  the  parties5  term  sheets,  and  he  told 

Sterling  on  January  29,  20 IS  would  not  go  forward  with  the  planned  transaction, 

see  supra  14®,  (n).  Accordingly,  there  is  probable  cause  to  believe  that  the  Account  will 
contain  evidence  of  the  negotiations  between  Sterling  and  the  parties,  evidence  of  a  payment  from 


Cohen  tol 


and  the  reasons  for  the  collapse  of  the  Cohe 


transaction, 


12  For  instance,  from  records  provided  by  Sterling,  Iknow  that  on  oiyfoout  DinufflrtxaA 
20 It  |ent  an  email  to  a  Sterling  emplove^sing  the  | 

Account,  The  email  forwaided  correspondence  betweejB 

Account,  and  an  employee  of  Capital  One  regarding  extending,  loan  with 

Capital  One. 
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26.  Additionally,  it  appears  that  Cohen  set  up  the  MDCPC  Account  to  receive  emails  he 
was  previously  receiving  at  the  Cohen  Account,  Specifically,  based  on  my  review  of  records 
maintained  by  AT&T,  I  have  learned  that  on  or  about  May  5,  2017,  Cohen  sent  an  email  from  tire 
MDCPC  Account  to  a  blind  copy  list  of  recipients  stating  that  “[d]ue  to  the  overwhelming  volume 
of  phone  calls  and  emails  coming  into  my  previous  cellular  number  and  e-mail  address,  I  have 
elected  to  create  for  Clients  Only  the  folio  whig.  Kindly  use  this  new  information  for  all  future 
contact  and  communications.31  The  signature  line  on  the  email  listed  “Essential  Consultants  LLC” 
and  “Michael  D.  Cohen  &  Associates,  PC,’5  as  well  as  the  MDCPC  Account  as  the  email  address. 13 

27.  Iu  addition,  based  on  my  review  of  emails  from  the  MDCPC  Account  produced 

pursuant  to  the  Prior  Cohen  Account  Warrants  and  the  MDCPC  Header  Information,  I  have  learned 
that  Cohen  has  used  the  MDCPC  Account  to  send  and  receive  emails  from  die  Cohen  Account,  to 
communicate  with  -Account,  and  to  send  and  receive  emails  from  other  email  accounts 

about  his  political  consulting  business.  Additionally,  from  my  review  of  the  MDCPC  Header 
Information,  it  appears  that  since  the  November  13, 2017  search  warrant  on  the  MDCPC  Account, 
Cohen  has  continued  to  send  and  receive  emails  at  the  MDCPC  Account  that  appear  likely  to  be 
relevant  to  the  commission  of  the  Subject  Offenses.  For  example,  emails  obtained  pursuant  to  the 
Prior  Cohen  Account  Warrants,  as  well  as  the  MDCPC  Header  Information  have  revealed  the 
following: 

a.  On  approximately  eight  occasions  in  August  and  September  2017,  while  Cohen, 
vere  communicating  about  n  term  sheet  for  the  Colre.  fax! 


13  Based  oil  my  review  of  emails  from  the  MDCPC  Account  obtained  pursuant  to  subpoena,  I 
have  learned  that  Cohen  has  used  die  accoimt  to  communicate  with  numerous  individuals  with 
whom  lie  does  not  enjoy  an  attorney-client  privilege,  including  some  of  the  individuals  described 
below.  See  infi’a  ^  27, 
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medallion  transaction,  See  supra  f  14(k),  Cohen  used  the  MDCPC  Account  to  send  or  receive 


emails  froii 

d 


at  the 


I  used 


Account.  For  instance,  on  or  about  August  22,  2017  | _ 

kccount  to  send  an  email  to  Sterling  Employee- 1  and  copied  Cohen  on  the  email  at  the 
MDCPC  Account.  On  the  same  day,  Sterling  Employee-1  responded  to  at  the  Account 
and  Cohen  at  the  MDCPC  Account.  On  or  about  August  22,  2017,  Cohen  also  used  the  MDCPC 

Account  to  send  an  email  to  Sterling  Employee- 1. 

b.  As  noted  above,  on  or  about  September  1, 201 7,  Cohen  used  the  MDCPC  Account  - 


to  send  or  receive  eight  emails  with  the 


Account. 


*  c,  Cohen  used  the  MDCP  C  Account  to  send  and  receive  emails  from  individuals  who 
work  at  companies  with  whom  it  appeal’s  Cohen  lias  a  political  consulting  agreement.  For 
example,  beginning  in  April  2017— the  same  month  when  Cohen  began  receiving  payments  from 
AT&T,  see  supra  |K  16(d),  17(c)— Cohen  used  the  MDCPC  Account  to  send  and  receive  emails 
from  AT&T  employees.  These  emails  contain,  among  other  things,  invoices  from  Cohen  to  AT&  1 


for  consulting  work  by  Cohen.  Similarly,  beginning  in  April  2017— which  is  also  the  month 
Cohen  began  receiving  payments  from  Novartis  for  consulting  work,  see  supra  16(d),  17(d)— 
Cohen  used  the  MDCPC  Account  to  send  and  receive  emails  from  employees  of  Novartis.  These 
emails  concern,  among  other  things,  invoices  from  Cohen  and  requests  for  Novartis  for  Cohen  s 


assistance  on  an  initiative  relating  to  drug  pricing. 

d.  From  my  review  of  tlie  MDCPC  Header  information,  I  have  learned  that  Cohen  lias 
continued  to  use  the  MDCPC  Account  to  send  and  receive  emails  from  individuals  who  work  at 
companies  with  whom  it  appeal’s  Cohen  had  a  political  consulting  agreement,  such  as  Novartis  and 
AT&T,  For  instance,  on  approximately  six  occasions  between  November  28,  2017  and  January 
30,  2018,  the  MDCPC  Account  was  used  to  send  and  receive  emails  from  accounts  belonging  to 
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individuals  using  @altcom  email  addresses.  Similarly,  on  approximately  seventeen  occasions 
between  December  1,  2017  and  February  20,  2018,  the  MDCPC  Account  was  used  to  send  and 


receive  emails  from  accounts  belonging  to  individuals  using  @no  vartis.com  email  addresses. 


Since  November  1 5, 2017,  the  MDCPC  Account  has  also  sent  and  received  emails  with  individuals 
using  the  email  domains  @bta.kz,  which  I  believe  is  the  email  domain  used  by  employees  of  BTA 
Bank,  see  supra  16(d),  17(b),  and  @squirepb.com,  which  1  believe  is  the  email  domain  used  by 
employees  of  the  law  firm  Squire  Patton  Boggs— both  of  which  Cohen  appears  to  have  a 
consulting  relationship  with,  see  supra  16(e),  17(e).  Accordingly,  it  appears  that  Cohen 
continues  to  use  the  MDCPC  Account  to  send  and  receive  emails  that  will  be  relevant  to  whether 
he  is  maintaining  a  consulting  business,  what  type  of  consulting  work  he  is  doing,  and  whether  he 
is  receiving  money  for  that  consulting  work. 

28.  In  addition  to  the  foregoing,  based  oil  my  review  of  the  Pen  Register  Data,  see  supra  1) 
9,  it  appears  that  since  the  date  of  the  last  search  warrant  on  the  Cohen  Account  (i.e.,  November 
13,  2017),  Cohen  has  continued  to  use  the  Cohen  Accoimt  to  communicate  with  the 


kccount,  and  other  email  accounts  that  appear  likely  to  be  relevant 


bcount,  die 


to  the  commission  of  the  Subject  Offenses  described  above.  For  example,  the  Pen  Register  Data 
has  revealed  the  following: 


Lceount  on  or  about  December  18, 


a.  Emails  sent  by  the  Cohen  Account  to  the 


2017  at  8:26  p.m.,  December  21,  2017  at  9:35  p.m.,  December  22,  2017  at  4:32  p.m.,  January  3, 

2018  at  8:01  a.m.,  January  3,  2018  at  2:56  p.m.,  and  January  4, 2018  at  3:31  p,m. 


b.  An  email  sent  by  the  Cohen  Account  to  the 


.ccount  on  or  about 


January  25,  2018  at  8:55  p.m. 
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c.  Emails  from  the  Cohen  Account  to  the  email  accoun]  tm  or 

about  December  1,  2017  at  2:14  p.m,,  December  29f  2017  at  10:20  p.m.,  January  2,  2018  at  3:52 


p.m,,  January  2,  2018  at  5:44  p.m.,  and  January  8,  2018  at  6:38  p.m.  Based  upon  my  review  of 
cma i  i.s  contained  in  the  Cohen  Account.  I  have  learned  that  the  email  account 

belongs  to  Jeffrey  Getzel,  Cohen’s  accountant,  through  whom  Cohen  made  misrepresentations  to 
financial  institutions,  as  discussed  above. 

d,  Emails  from  the  Cohen  Account  to  emai  1  accounts  belonging  to  Sterling  employees, 
including  Sterling  Employee-!,  on  or  about  January  25,  2018  at  10:23  p.m.,  January  26,  2018  at 
12:55  a.m.,  January  29, 2018  at  5:30  p.m.,  January  29, 2018  at  8:29  p.m.,  January  30, 2018  at  6:44 


p.m. 

e.  An  emai!  sent  from  the  Cohen  Account  to  the  email  account 
clientsei-viceny@firstrepnblic.com  on  or  about  January  25,  2018  at  5:29  p.m.  As  stated  above. 
First  Republic  is  the  bank  at  which  the  Essential  Consultants  Account  is  held. 

f.  Numerous  emails  sent  from  the  Cohen  Account  to  the  email  account 


including  emails  on  or  about  December  4, 2017  at  2:1 7  pan.  and  January  29, 
201 8  at  5 :43  pan.  Based  upon  the  email  address  and  domain  name,  as  well  as  my  review  of  reports 
of  interviews  and  documents  reflecting  that  Cohen’s  taxi  medallions  were  leased  and  operated  by 

I  believe  that  the  ;  email  address  belongs  to 


29.  Based  on  my  review  of  records  maintained  by  Stealing,  1  know  that  Cohen  used  the 
Cohen  Account  to  send  and  receive  documents  related  to  the  Cohen-i^^^^J  transaction . 
Based  on  my  training  and  experience,  1  know  that  Google  allows  users  of  e-mail  accounts  to  easily 
documents  to  file  sharing  and  retention  platforms  such  as  Google  Docs  and  Google  Drive.  I 


save 
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also  know,  from  my  training  and  experience,  that  users  of  e-mail  accounts  often  use  instant 
messaging  interfaces  linked  to  their  email  accounts.  Further,  I  have  learned  that  the  Providers 
maintain  records  of  search  and  web  histories  associated  with  email  accounts  and,  based  on  my 
training  and  experience,  users  of  e-mail  accounts  use  associated  web  search  browsers  associated 
with  a  subscriber’s  account  to  research  topics  they  are  e-mailing  about.  Accordingly,  there  is 
probable  cause  to  believe  that  content  information  associated  with  the  Subject  Accounts  will  also 


contain  evidence  related  to  the  Subject  Offenses. 


30.  Thus,  I  respectfully  submit  that  there  is  probable  cause  to  believe  that  emails  and  other 
content  information  from  the  Subject  Accounts  will  contain  evidence  of  Cohen’s  efforts  to  sell  liis 
taxi  medallions  and  the  associated  debt,  and  his  misrepresentations  and  omissions  to  Sterling  and 
Melrose  in  connection  with  these  negotiations.  Although  Cohen  appears  to  have  communicated 

primarily  through  the  Cohen  Account  and 
MDCPC  Account,  I  know,  based  on  my  involvement  in  the  investigation,  that  Cohen  also  used  at 
least  one  other  email  account  associated  with  his  position  at  the  Trump  Organization,  Thus,  I 
respectfully  submit  that  there  is  probable  cause  to  believe  tbat  emails  and  other  content  information 


from  the  I 


Account,  j 


recount  and 


lAccount  since  on  or 


about  October  1,  2016 — the  approximate  date  of  when  Cohen’s  efforts  to  sell  his  taxi  medallions 
and  the  associated  debt  began — will  reflect  communications  with  tire  Cohen  Account,  MDCPC 
Account,  and  possibly  one  or  more  additional  accounts  used  by  Cohen,  and  probable  cause  to 
believe  that  such  emails  will  constitute  evidence  of  Cohen’s  commission  of  the  Subject  Offenses, 
including  the  extent  to  which  Cohen  did  or  did  not  inform  other  individuals  involved  in  the  conduct 


described  above — such  a;; 
omissions  to  financial  institutions. 


I— of  his  misstatements  and 
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31.  Temporal  T. imitation.  This  application  seeks  all  emails  and  other  requested  content 
in  formation  specified  in  Attachments ‘A,  B,  C,  and  D  for  tine  following  periods: 

a.  For  the  Cohen  Account,  this  application  seeks  all  emails  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive,  As  described  above, 
pursuant  to  the  Prior  Cohen  Account  Warrants,  the  SCO  obtained  and  provided  to  the  US  AO 
emails  from  the  Cohen  Account  that  were  sent,  created,  or  recei  ved  before  November  14,  2017. 
This  application  also  seeks  other  information  specified  above  associated  with  the  Cohen  Account 
that  was  created  between  December  1,  2014  (the  month  when  Cohen  entered  into  the  medallion 
loans  with  Sterling),  and  the  date  of  the  proposed  warrant,  inclusive. 

b.  For  the  MDCPC  Account,  this  app]  ication  seeks  all  email  s  sent,  created,  or  received 
between  November  14, 2017,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above, 
pursuant  to  a  prior  warrant  the  SCO  obtained  and  provided  to  the  USAO  emails  from  the  MDCPC 
Account  that  were  sent,  created,  or  received  before  November  14, 2017, 

the  Account  and  .^^^^^^Jkccount,  this 

seeks  emails  and  all  other  content  information  specified  above  sent,  created,  or  received  between 
October  1,  2016,  and  the  date  of  the  proposed  warrant,  inclusive.  As  described  above,  October 
201 6  is  tlic  month  in  which  Cohen  began  negotiating  the  taxi  medallion  sale  with  t! 

d.  For  the  ^^^kccount,  this  application  seeks  emails  and  all  other  content 
information  specified  above  sent,  created,  or  received  between  December  1 ,  2016,  and  the  date  of 
the  proposed  warrant,  inclusive.  As  described  above,  December  20 1 6  is  the  month  in  which  I 
began  representing  Oil  j  relation  to  the  taxi  medallion  transaction. 

E.  Evidence,  Emits  and  Instrumentalities 

32.  Based  upon  the  foregoing,  I  respectfully  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Croogle’s  servers  associated  with  the  Cohen  Account  will  contain  evidence, 
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fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  as  more  fully  described  in 
Section  11  of  Attachment  A  to  the  proposed  warrant  for  the  Cohen  Account  and  MDCPC  Account, 
including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  the  Cohen  Account  or  MDCPC  Account, 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling,  Melrose, 
and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  of  liabilities,  to  others,  including  tc| .  |.nd/or  entities 

associated  Witt  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential 

'h1.  ''  V^i|[i«i 

Consultants,  1XC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature 
and  purpose  of  payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  & 
Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 

identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  Hie  Cohen  Account  and/or  MDCPC  Account  about  any  matters  relating  to 
Essential  Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities 
associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 
liabilities,  to  others,  including  to  j.  |md/or  entities  associated  with  him; 

f.  Common  i cations  between  the  Cohen  Account  and/or  MDCP  C  Account  and  Jeffrey 
Getzel  relating  to  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Cohen  Account  and  MDCPC  Account  was 
accessed  or  used,  to  determine  the  geographic  and  chronological  context  of  account  access,  use, 
and  events  relating  to  the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  nidi  eating  the  Cohen  Account  and  MDCPC  Account  owner  s  intent  as  it 

relates  to  the  Subject  Offenses  under  investigation, 

33.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 

information  stored  on  Google’s  servers  associated  with  the 

ccount  will  contain  evidence,  Suits,  and  instrumentalities  of  violations  of  the  Subject 

Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  the  person(s)  who  created  or  used  ft 
Account; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  t  |  aiu^or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 


Account  and 


Account  and 
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communicated  with  the  Account  and  ,  .  Account  about  any 

matters  relating  to  any  plan  or  proposal  or  agreement  for  Cohen  and/or  entities  associated  with  him 
to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to 

|  iind/or  entities  associated  with  him; 

d.  Communications  between  th  Account  and 

Account  and  others,  including  employees  or  representatives  of  Sterling,  Melrose,  or  other  financial 
iustitution(s),  regarding” CdEeh’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false 
representations  to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan 
at  that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a 
financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any 
financial  transactions  involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Account  and 

Account  were  accessed  or  used,  to  determine  the  geographic  and  chronological  context 

of  account  access,  use,  and  events  relating  to  the  crimes  under  investigation  and  to  the  account 


owner; 

g.  Evidence  indicating  Account  and  Account 

owners’  intent  as  it  relates  to  the  Subject  Offenses  under  investigation, 

34.  Based  upon  the  foregoing,  I  further  submit  there  is  probable  cause  to  believe  that 
information  stored  on  Oath’s  servers  associated  with  the^^^^ji-ccount  will  contain  evidence, 
fruits,  and  instrumentalities  of  violations  of  the  Subject  Offenses,  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the 
identi  ty  of  the  person(s)  who  created  or  used  th e| |  l  c count; 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal 

or  agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  f  t  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  hie 

identity  of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Account  about  any  matters  relating  to  any  plan  or  proposal  or 

agreement  for  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi  medallions, 
and  any  associated  debts  or  liabilities,  nd/or  entities  associated  with  him; 

d.  Communications  between  t^^^^fccount  and  others,  including  employees  or 
representatives  of  Sterling,  Melrose,  or  oilier  financial  institution(s),  regarding  Cohen’s  finances; 
and 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution. 

HI.  Review  of  the  Information  Obtained  Pursuant  to  the  Warrant 

35.  Pursuant  to  18  U.S.C,  §  2703(g),  the  presence  of  a  law  enforcement  officer  is  not 
required  for  service  of  a  search  warrant  issued  under  §  2703,  or  for  the  collection  or  production  of 
responsive  records.  Accordingly,  the  warrant  requested  herein  will  be  transmitted,  to  the  Providers, 
which  shall  be  directed  to  produce  a  digital  copy  of  any  responsive  records  to  law  enforcement 
personnel  within.  30  days  from  the  date  of  service.  Law  enforcement  personnel  (including,  in 
addition  to  law  enforcement  officers  and  agents,  and  depending  on  the  nature  of  the  ESI  and  tire 
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status  of  the  investigation  and  related  proceedings,  attorneys  tor  the  government,  attorney  support 
staff,  agency  personnel  assisting  the  government  in  this  investigation,  and  outside  technical  experts 
under  government  control)  will  retain  the  records  and  review  them  for  evidence,  fruits,  and 
instrumentalities  of  the  Subject  Offenses  as  specified  in  Section  III  of  Attachments  A,  B  and  C  to 
the  proposed  warrant, 

36.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fin  its,  and  instrumentalities  of  the  Subject  Offenses,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails  within  the  Subject  Account,  this  method  is 
analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine  which  paper 
evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other  methods  as 
well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and  similar  methods 
are  typically  inadequate  tq  detect  all  information  subject  to  seizure.  As  air  initial  matter,  keyword 
searches  work  only  for  text  data,  yet  many  types  of  fries  commonly  associated  with  emails. 
Including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store  data  as 
searchable  text.  Moreover,  even  as  to  text  data,  keyword  searches  cannot  be  relied  upon  to  capture 
all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of  the  unique 
words  or  phrases  that  investigative  subjects  will  use  in  then  communications,  and  consequently 
there  are  often  many  communications  in  an  account  that  are  relevant  to  an  investigation  but  that 
do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

37.  Because  Cohen  attorneys,  the  review  of  the  content  within  the  Subject 

Accounts  will  be  conducted  pursuant  to  established  screening  procedures  to  ensure  that  the  law 
enforcement  personnel  involved  in  the  investigation,  including  attorneys  for  the  Government, 
collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney-client  or  other  appli  cable 
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privilege.  When  appropriate,  the  procedures  will  include  use  of  a  designated  “filter  team  ”  separate 
and  apart  from  the  investigative  team,  in  order  to  review  potentially  privileged  communications 
and  determine  which  communications  to  release  to  the  investigation  and  prosecution  team. 

IV.  Request  for  Non-Disclosure  and  Sealing  Order 

38.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not  publicly  known. 
As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  warrants  could  alert 
Cohen  that  he  is  under  investigation,  causing  him  to  destroy  evidence,  flee  from  prosecution,  or 
otherwise  seriously  jeopardize  the  investigation,  hi  particular,  based  on  my  experience 
investigating  wliite  collar  cases,  including  cases  featuring  documents  such  as  agreements,  drafts 
of  agreements,  notes  of  conversations,  and  other  documentary  evidence,  premature  disclosure  of 
an  investigation  may  cause  the  tavget  of  the  investigation  to  attempt  to  destroy  or  conceal  such 
evidence.  In  addition,  as  also  set  forth  above,  Cohen  uses  computers  and  electronic 
communications  in  furtherance  of  his  activity  and  thus  could  easily  delete,  encrypt,  or  otherwise 
conceal  such  digital  evidence  from  law  enforcement  were  he  to  learn  of  the  Government’s 
investigation.  See  18  U.S.C.  §  2705(b)(3).  Cohen  also  appears  to  have  the  financial  means  that 
would  facilitate  bis  flight  from  prosecution.  See  18  U.S.C,  §  2705(h)(2),  (5). 

39.  Accordingly,  there  is  reason  to  believe  that,  were  the  Providers  to  notify  the  subscriber 
or  others  of  the  existence  of  the  warrant,  the  investigation  would  be  seriously  jeopardized. 
Pursuant  to  1 8  U.S.C.  §  2705(b),  I  therefore  respectfully  request  that  the  Court  direct  the  Providers 
not  to  notify  any  person  of  the  existence  of  the  warrant  for  a  period  of  180  days  from  issuance, 
subject  to  extension  upon  application  to  the  Court,  if  necessary. 

40.  For  similar  reasons,  I  respectfully  request  that  this  affidavit  and  all  papers  submitted 
herewith  be  maintained  under  seal  until  the  Court  orders  otherwise,  except  that  the  Government 
be  permitted  without  further-  order  of  this  Court  to  provide  copies  of  tire  warrant  and  affidavit  as 
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need  be  to  personnel  assisting  it  in  the  investigation  and  prosecution  of  this  matter,  and  to  disclose 
those  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  tins  matter. 

V.  Conclusion 

41.  Based  on  the  foregoing,  I  respectfully  request  that  tire  Court  issue  the  warrants  sought 
herein  pursuant  to  the  applicable  provisions  of  the  Stored  Communications  Act,  18  Q.S.C. 
§  2703 (b)(1)(A)  (for  contents)  and  §  2703(c)(1)(A)  (for  records  and  other  information),  and  the 
relevant  pro  visions  of  Federal  Rule  of  Crimina  l  Procedure  41. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
28th  day  of  February,  2018 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
.'[JgmaiLeom,  . 


_ Maintained  at 

Premises  Controlled  by  Google,  lac,, 
USAO  Reference  No,  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  tire  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  rf'  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  tire  provisions  of  the 
Stored  Communications  Act.  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account;  l@gmail.coni^^^^^|2igmail.coni,  and 

_  _  _  _  i'~ 

,  maintained,  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  tire  Investigative  Agencies,  within  7  days  of  tire  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  H  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  hr  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  TJ.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  tliis  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice, 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under'  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  tire  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  he  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


flAo:RABIffiGABINi^ 

Chief  United  Staty's  ■  Magistrate  Judge 
Southern  District  -q f; NeV Yqrlt 
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Email  Search  Attachment  A 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  "Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
il.com  (the  "Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  tire  Provider.  The  Provider  js  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  ol  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  ITI  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  horn,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  of  this  warrant, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account, 

c.  Subscriber  and  payment  information.  A1J  subscriber  and  payment  information 
regarding  tire  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history, 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  JP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  aud  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  I,  2014 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  tire  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  of  this 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gclrats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  20 1 4  and  the  date  of  this  warrant,  inclusive. 

lr.  Preserved  or  backup  records .  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C,  §  2703(f)  or  otherwise. 

Itl.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  .attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  hr  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  In  order  to  Locate  airy  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344-  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  fdes  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  tire  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  hi  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  includin 
entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates: 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  pi  ah  or  proposal  or,  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  If  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D,  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  avid  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

“  i.  Evidence  indicating  the  Subject  Account  owner* s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  tills  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  hi  order  to  address 
potential  privileges. 
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Email  Search  Attachment  B 
L  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  ^^(^gmail.com  at  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1,  2016  and  the  date  of  this  warrant,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider,  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  dr-aft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  die  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  JP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subj  ect  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken, 

£  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  -and  instant 
messages  or  Gcbats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  haclcup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  IS 
U.S.C.  §  2703(f)  or  otherwise, 

TIL  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 

agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  insti  tution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 


02,28  2018 


2 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  62  of  73 


b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  md/or  entities  associated 

with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution^), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  wi  th  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  tire  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  fuuds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  maimer  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team/5  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 

In  the  Matter  of  a  Warrant  for  All  j 
Content  and  Other  Information  j 
Associated  with  the  Email  Accounts  : 
|@gmail.com, 

B53gmail.com,  and  j 

i.  Maintained  at  ; 
Premises  Controlled  by  Google,  Inc.,  j 
USAO  Reference  No.  201 8R00127 


1 8  MAG  2877 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 

Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

1.  Warrant.  Upon  an  affidavit  of  Special  Agent  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  i^^^^^^|@grnail.com,  ajgmail.com,  and 

,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  111  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  IJ.S.C,  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  tiiat  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  tills  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated;  New  York,  New  York 


/>? 


Date  Issued 


Time  Issued 


HONORABLE  HENRY  B.  PITMAN 
UNITED  STATES  MAGISTRATE  JUDGE 
Southern  District  of  New  York 
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Email  Search  Attachment  A 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
il.com  (tlie  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  Ill  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 

to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14,  2017  and  February  28,  2018, 
inclusive. 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account, 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1 , 2014  and  February  28.  2018,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 2014 
and  February  28,  2018,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1,  2014  and  February  28, 
2018,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,  2014  and  February  28,  201 8,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
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and  instrumentalities  of  18  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343  (wire 
fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  tiles  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  tc  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 
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g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  puipose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity'  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to  established 
procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect  any  attorney- 
client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include  use  of  a 
designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


2017.03.25 


4 


Case  l:18-cr-00602-WHP  Document  48-5  Filed  07/18/19  Page  70  of  73 


Email  Search  Attachment  B 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  '‘Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts^^|@gmail.com  and  (the  “Subject  Accounts”)  for  the  time 

period  between  October  1 , 2016  and  February  28,  2018,  inclusive. 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  ot  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  failing  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 
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c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  AH  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken, 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  1 8 
U.S.C.  §  2703(f)  or  otherwise. 

III.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  older  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1 344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 

b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 


medallions,  and  any  associated  debts  or  liabilities,  to] 
with  him; 


and/or  entities  associated 


c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated  with  the  Subject  Accounts  about  any  matters  relating  to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 


d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Batik,  Melrose  Credit  Union,  or  other  financial  institution^), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 
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f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
tire  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  Subject  Accounts  owners5  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  tire  investigative  team,  in  order  to  address 
potential  privileges. 
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AO  93  (SDNY  Rev.  05/10)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

Southern  District  of  New  York 
In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  )  Case 

Three  Electronic  Devices,  See  Attachment  A  ^ 

) 

SEARCH  AND  SEIZURE  WARRANT 

To :  Any  "author  ized  — - — - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Southern  District  of  _ New  York _ 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )\ 

Three  Electronic  Devices,  See  Attachment  A 

The  person  or  property  to  be  searched,  described  above,  is  believed  to  conceal  (identify  the  person  or  describe  the 
property  to  be  seized)'. 

See  Attachment  A 

I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search,  and  seize  the  person  or 
property.  /  ,  /. 

YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  /jf  -  ■  (fy  - 

>■  5  ,  '  (not  to  exceed  14  days) 

□  in  the  daytime  6:00  a.m.  to  10  p.m.  S?f  at  any  time  in  the  day  or  night  as  I  find  reasonable  cause  has  been 

established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property 
taken  to  the  person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the 
place  where  the  property  was  taken. 


The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an 
inventory  as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  the  Clerk  of  the  ,  Court.  # 

y  Upon  its  return,  this  warrant  and  inventory  should  be  filed  under  seal  by  the  Clbrkof  the  Court. 


USMJ  Initials 


Sf  I  find  that  immediate  notification  may  have  an  adverse  result  listed  ih  1 8  ,TL S  .C .  §  27 OS  (except  for  delay 
of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  thd  person  who,  or  whose-  property,  will  be 
searched  or  seized  (check  the  appropriate  box)  Sffor  30  days  (not  to  exceed  $0),  \  ' '  -fl  v 

□until,  the  facts  justifying,  the  later  specific  date  of  v 


Date  and  time  issued:  A/  ~~  $ 


Judge  *s  signdiuie 


7^ 


City  and  state:  New  York.  NY 


Hon.  Henry  B.  Pitman.  U.S.  Magistrate  Judge 

Printed  name  and  title 
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AO  93  (Rev.  01/09)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  • 
to  the  Court. 


Date;  _  _ 

Executing  officer ’s  signature 


Printed  name  and  title 
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Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device- 1 :  A  black  and  red  U SB  drive  with  a  white  label  that  says  “T racking 
#:  180208140208  ” 

b.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 

2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google 

_ _ andl&l.”  . . . . .  - _ _ _ _ _ _  Jf 

1 

II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 

(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

il 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 

‘ 

I 

agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 

| 

documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 

and/or  Karen  McDougal.  ; 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or  j 

consultation  with  the  Trump  Campaign. 
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e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 

| 

Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 


2 
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AO  106  (Rev.  06/09)  Application  for  a  Search  Warrant 


United  States  District  Court 


for  the 

Southern  District  of 


In  the  Matter  of  the  Search  of 


(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

Three  Electronic  Devices,  See  Attachment  A 


Case  No. 


APPLICATION  FOR  A  SEARCH  WARRANT 


I,  a  federal  law  enforcement  officer  or  an  attorney  for  the  government,  request  a  search  warrant  and  state  under 
penalty  of  perjury  that  I  have  reason  to  believe  that  on  the  following  person  or  property  (identify  the  person  or  describe  the 
DroDertv  to  be  searched  and.eive.its  locationlL.  _  _ 

~TK«tt  ^l-fc  ■KC'ewvie-  Devi'Cr^ 


ySee-Attachment-A- 


located  in  the 


Southern 


District  of 


New  York 


,  there  is  now  concealed  (identify  the 


person  or  describe  the  property  to  be  seized)'. 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

The  basis  for  the  search  under  Fed.  R.  Crim.  P.  41(c)  is  (check  one  or  more)’. 
ivf  evidence  of  a  crime; 

□  contraband,  fruits  of  crime,  or  other  items  illegally  possessed; 

□  property  designed  for  use,  intended  for  use,  or  used  in  committing  a  crime; 

□  a  person  to  be  arrested  or  a  person  who  is  unlawfully  restrained. 

The  search  is  related  to  a  violation  of: 


Offense  Description 


Code  Section 

52  USC  301 1 6(a)(1  )(A),  30109  Illegal  campaign  contributions 
(d)(1)(A)(1) 


The  application  is  based  on  these  facts: 

PLEASE  SEE  ATTACHED  AFFIDAVIT  AND  RIDER. 

sf  Continued  on  the  attached  sheet. 

sf  Delayed  notice  of  30  days  (give  exact  ending  date  if  more  than  30  days: 
under  18  U.S.C.  §  3103a,  the  basis  of  which  is  set  forth  on  the  attached  sheet 


)  is  requested 


Sworn  to  before  me  and  signed  in  my  presence. 
Date:  V- 

City  and  state:  AJ_ 


'  Judge ’s  signature 

Hon.  Henry  B.  Pitifian,  U.S.  Magistrate  Judge 
.Printed  riame  and  title 
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TO  BE  FILED  UNDER  SEAL 

Agent  Affidavit  in  Support  of 
Application  for  a  Search  Warrant 


Special  Agent  of  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York  (“USAO”)’ being  duly  sworn,  deposes  and  says: 

I.  Introduction 
A.  Affiant 

1 .  I  have  been  a  Special  Agent  with  the  U S  AO  since  August  2016.  I  previously  served 
as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from  May  201 1 
to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have  participated 
in  criminal  investigations  into  federal  offenses  involving  a  wide  array  of  financial  crimes, 
including  frauds  on  financial  institutions,  and  have  been  involved  in  investigations  involving 
violations  of  campaign  finances  laws  and  regulations.  I  also  have  training  and  experience 
executing  search  warrants,  including  those  authorizing  the  search  of  email  accounts  and  electronic 
devices. 

2.  I  make  this  Affidavit  in  support  of  an  application  pursuant  to  Rule  41  of  the  Federal 
Rules  of  Criminal  Procedure  for  a  warrant  to  search  the  electronic  devices  specified  below  (the 
“Subject  Devices”)  for  the  items  and  information  described  in  Attachment  A.  This  affidavit  is 
based  upon  my  personal  knowledge;  my  review  of  documents  and  other  evidence;  my 
conversations  with  other  law  enforcement  personnel;  and  my  training,  experience  and  advice 
received  concerning  the  use  of  computers  in  criminal  activity  and  the  forensic  analysis  of 


UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


hi  the  Matter  of  the  Application  of  the  United 
States  Of  America  for  a  Search  Warrant  for  Three 
Electronic  Devices,  USAO  Reference  No 
2018R00127 


SOUTHERN  DISTRICT  OF  NEW  YORK)  ss.: 
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electronically  stored  information  (“ESI”).  Because  this  affidavit  is  being  submitted  for  the  limited 
purpose  of  establishing  probable  cause,  it  does  not  include  all  the  facts  that  I  have  learned  during 
the  course  of  my  investigation.  Where  the  contents  of  documents  and  the  actions,  statements,  and 
conversations  of  others  are  reported  herein,  they  are  reported  in  substance  and  in  part,  except  where 
otherwise  indicated. 

B.  Prior  Warrants  and  the  Subject  Devices 

3.  The  USAO  and  the  Federal  Bureau  of  Investigation  (“FBI”)  have  been 
investigating,  among  other  things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  Cohen 
is  an  attorney  who  currently  holds  himself  out  as  the  personal  attorney  for  President  Donald  Trump, 
and  who  previously  served  for  over  a  decade  as  an  executive  in  the  Trump  Organization,  an 
international  conglomerate  with  real  estate  and  other  holdings. 

4.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the 
Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief 
United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and 
other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  1 8, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

emails  in  the  account  Tgm.ail.com  (the  “Cohen  Gmail  Account”)  sent  or  received 

between  January  1,  2016  and  July  18,  2017.  This  warrant,  which  is  numbered  17-mj-00503,  is 
attached  as  Exhibit  A  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant 

for  content  stored  in  the  iCloud  account  associated  with  Apple  ID  fTgmail.com  (the 

“Cohen  iCloud  Account”).  This  warrant,  which  is  numbered,  17-mj~00570,  is  attached  as  Exhibit 
D  (the  “Cohen  iCloud  Warrant”). 
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c.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 
warrant  for  emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,  2015  and 
November  13,  2017.  This  warrant,  which  is  numbered  17-mj-00855,  is  attached  as  Exhibit  B  (the 
“Second  Cohen  Gmail  Warrant”). 

d.  On  or  about  November  13,  2017,  the  FBI  sought  and  obtained  a  search 

warrant  for  emails  in  the  account  |  the  “Cohen  MDCPC  Account”)  sent  or 

received  between  the  opening  of  the  Cohen  MDCPC  Account1  and  November  13,  2017.  This 
warrant,  which  is  numbered  17-mj-00854,  is  attached  as  Exhibit  C  (the  “First  Cohen  MDCPC 
Warrant”). 

5.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the 
US  AO,  which  is  worldng  with  the  FBI’s  New  York  Field  Office.  As  part  of  that  referral,  on  or 
about  February  8,  2018,  the  SCO  provided  the  USAO  with  all  non-privileged  emails  and  other 
content  information  obtained  pursuant  to  the  First  Cohen  Gmail  Warrant,  Second  Cohen  Gmail 
Warrant,  and  Cohen  MDCPC  Warrant.  On  or  about  March  7,  2018,  the  SCO  provided  the  USAO 
with  all  non-privileged  content  obtained  pursuant  to  the  Cohen  iCloud  Warrant.2  A  filter  team 
working  with  the  SCO  had  previously  reviewed  the  content  produced  pursuant  to  these  warrants 
for  privilege. 

6.  On  or  about  February  28, 20 1 8,  the  USAO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 

1  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

2  The  SCO  had  previously  provided  a  subset  of  this  non-privileged  content  on  or  about  February 
2,2018. 
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received  between  November  14,  2017  and  February  28,  2018.  These  warrants,  which  are  both 
numbered  1 8  Mag.  1696,  are  attached  as  Exhibits  E  (the  “Third  Cohen  Gmail  Warrant”)  and  F  (the 
“Second  Cohen  MDCPC  Warrant”),  respectively.  The  content  produced  pursuant  to  these 
warrants  is  being  reviewed  for  privilege  by  an  SDNY  fdter  team. 

7.  The  search  warrants  described  above  are  referred  to  collectively  herein  as  the  “Prior 
Warrants.” 

8.  The  returns  of  the  Prior  Warrants  are  presently  contained  on  three  electronic 
devices.  In  particular: 

a.  Subject  Device-1:  The  non-privileged  emails  and  content  returned  in 
response  to  the  First  Cohen  Gmail  Warrant,  the  Second  Cohen  Gmail  Warrant,  and  the  First  Cohen 
MDCPC  Warrant  are  contained  on  Subject  Device- 1,  which  is  particularly  described  as  a  black 
and  red  USB  drive  with  a  white  label  that  says  “Tracking  #:  180208140208.” 

b.  Subject  Device-2:  The  non-privileged  content  returned  in  response  to  the 
Cohen  iCloud  Warrant  is  contained  on  Subject  Device-2,  which  is  particularly  described  as  one 
silver  DVD  with  a  white  label  that  reads  “Cohen  —  201 8.03.07.” 

c.  Subject  Device-3:  The  content  returned  in  response  to  the  Third  Cohen 
Gmail  Warrant  and  the  Second  Cohen  MDCPC  Warrant  is  contained  on  Subject  Device-3,  which 
is  particularly  described  as  one  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google  and 
l&l.” 

9.  The  Subject  Devices  are  presently  located  in  the  Southern  District  of  New  York. 

C.  The  Subject  Offenses 

10.  The  affidavits  in  support  of  the  Prior  Warrants  describe  evidence  of  several 
different  courses  of  conduct  by  Cohen,  including,  among  other  things,  false  statements  to  financial 

institutions  relating  to  the  purpose  of  an  account  he  opened  in  the  name  of  Essential  Consultants 
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LLC  and  the  nature  of  funds  flowing  into  that  account;  false  statements  and  fraudulent  omissions 
by  Cohen  in  connection  with  this  attempt  to  refinance  his  debts  with  certain  financial  institutions; 
and  activities  undertaken  by  Cohen  on  behalf  of  certain  foreign  persons  or  foreign  entities  without 
having  registered  as  a  foreign  agent.  The  Prior  Warrants  accordingly  define  the  evidence  to  be 
seized  by  reference  to  subject  offenses  and  specific  categories  of  information  related  to  these 


cours.es  of  conduct.  The  subject  offenses  in  the  Prior  Warrants  are  summarized  as  follows: 


Exhibit 

Warrant 

3 

Subject  Offenses  in  Prior  Warrant 

A 

First  Cohen  Gmail 

. 18  U.S.C.  §§371  (conspiracy  to  defraud  the  United  States),  1005  (false 

Warrant 

bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§  611  etseq.  (Foreign  Agents 
Registration  Act  (“FARA”)) 

B 

Second  Cohen  Gmail 
Warrant 

18  U.S.C.  §§  371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

C 

Cohen  MDCPC  Warrant 

18  U.S.C.  §§  371  (conspiracy  to  defraud  the  United  States),  1005  (false 
bank  entries),  1014  (false  statement  to  financial  institution),  1343  (wire 
fraud),  1344  (bank  fraud),  1956  (money  laundering),  951  (acting  as  an 
unregistered  foreign  agent),  and  22  U.S.C.  §§611  etseq.  (FARA) 

D 

Cohen  iCloud  Warrant 

18  U.S.C.  §§  1014  (false  statement  to  financial  institution),  1344  (bank 
fraud),  1956  (money  laundering),  951  (acting  as  an  unregistered  foreign 
agent),  and 22 U.S.C.  §§  611  etseq.  (FARA) 

E 

Third  Cohen  Gmail 
Warrant 

18  U.S.C.  §§371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial, 
institution),  1343  (wire  fraud),  1344  (bank  fraud) 

F 

Second  Cohen  MDCPC 
Warrant 

18  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud  the  United 
States),  1005  (false  bank  entries),  1014  (false  statements  to  financial 
institution),  1343  (wire  fraud),  1344  (bank  fraud) 

1 1 .  Based  on  my  participation  in  this  investigation,  including  my  review  of  documents 
obtained  pursuant  to  subpoena  and  court  order,  my  conversations  with  witnesses  and  review  of 
reports  of  conversations  with  witnesses,  and  my  review  of  publicly  available  information,  I  have 


3  On  or  about  February  28,  2018,  the  USAO  sought  and  obtained  a  Rule  41  warrant,  authorizing  it 
to  expand  its  search  of  the  email  returns  for  the  warrants  attached  as  Exhibits  A-C  (the  First  Cohen 
Gmail  Warrant,  Second  Cohen  Gmail  Warrant,  and  First  Cohen  MDCPC  Warrant)  for  additional 
offenses  not  authorized  in  the  original  warrants  for  those  accounts.  The  below  chart  therefore  lists 
both  the  subject  offenses  listed  in  the  original  warrants  for  these  accounts  and  the  subject  offenses 
authorized  in  the  February  28,  2018  warrant. 
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learned  of  evidence  of  an  additional  Subject  Offense  committed  by  Cohen,  described  below,  which 
was  not  listed  in  the  Prior  Warrants.4 

12.  I  am  therefore  requesting  authority  to  expand  the  search  of  the  returns  of  the  Prior 
Warrants,  as  contained  on  the  Subject  Devices,  for  evidence  related  to  the  additional  Subject 
Offense.  As  set  forth  below,  in  addition  to  the  categories  of  evidence  already  described  in  the 
Prior  Warrants,  there  is  probable  cause  to  believe  that  the  Subject  Devices  contain  evidence  of 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”).5 

II.  Probable  Cause  Regarding  the  Subject  Offense 

13.  As  set  forth  above,  the  USAO  and  the  FBI  have  been  investigating,  among  other 
things,  a  scheme  by  Michael  Cohen  to  defraud  multiple  banks.  During  the  course  of  this 
investigation,  the  USAO  and  FBI  have  obtained  evidence  that  Cohen  has  also  committed  a  criminal 
violation  of  the  campaign  finance  laws  by  making  an  excessive  in-kind  contribution  to  the 
presidential  election  campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $  1 30,000  payment 
to  Stephanie  Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with 
Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair.  As  set  forth  below,  there 
is  probable  cause  to  believe  that  this  payment  was  intended  to  keep  Clifford  from  making  public 
statements  about  the  rumored  affair  on  the  eve  of  the  2016  presidential  election,  and  thus 
constitutes  a  campaign  contribution  in  excess  of  the  applicable  limit. 


4  As  set  forth  below,  I  base  this  application  in  part  on  my  review  of  emails  and  text  messages 
obtained  pursuant  to  the  Prior  Warrants.  Each  of  the  cited  emails  or  texts  messages  is  either 
responsive  to  the  applicable  Prior  Warrant  and/or  was  discovered  in  plain  view  during  a  review  of 
the  emails  or  texts  returned  pursuant  to  the  applicable  Prior  Warrant. 

5  The  Prior  Warrants  describe  categories  of  information  that  likely  encompass  evidence  of  the 
additional  Subject  Offense.  Nevertheless,  in  an  abundance  of  caution,  I  am  seeking  explicit 
authorization  to  search  the  Subject  Devices  for  evidence  of  the  Subject  Offense. 
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14.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  websites 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  El  News  that  “[t]he  totally  untrue  and  ridiculous  story  .  .  .  emanated  from 

a  sleazy  and  disgusting  website _ The  Tmmp  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

15.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  2016,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,  2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 
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16.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 
it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 
representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

17.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate 
magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October 
2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine, 
among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate ,  which  the  author  based  on' 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  . Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

18.  From  my  review  of  telephone  toll  records6  and  information  produced  pursuant  to 
the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 

6  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  from  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 
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Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer ,7  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  Based  on  the  timing  of  these  calls,  and  the 
content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Tramp  joined  the  call,  and  the  call  continued  for  over  four  minutes.8 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

h.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 


7  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

8 1  believe  that  Tramp  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Tramp  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Tramp’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Tramp,  or  that 
Tramp  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:3 1  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 
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f.  The  following  day,  on  October  1 0, 20 1 6,.  at  1 0 : 5  8  a.m. ,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  1 2:25  p.m.,  Davidson  sent  Cohen  a  text  message 
that  stated:  “Michael  —  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to  be  today. 

Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.9 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 

9  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  1 3,  2016,  and  the  days  that  followed,  Cohen  took  steps 
to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic,  as  well  as  my  participation  in  interviews  with  First  Republic  employees,  I  have  learned 
the  following: 

a.  On  the  morning  of  October  1 3, 2016,  at  8 :54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30,  2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
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substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 
employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen 
and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford, 
and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential 
election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post ,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
if  Cohen  did  not  complete  the  transaction.10  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 


10  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 
investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tramp  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 
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21.  On  or  about  October  25,  2016,  the  communications  between  Cohen,  Davidson, 
Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford. 
Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email 
Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  First  Republic  Employee-2  and  told  him,  in  sum 
and  substance,  that  he  decided  not  to  open  an  account  in  the  name  of  “Resolution  Consulting”  and 
instead  would  be  opening  a  real  estate  consulting  company  in  the  name  of  “Essential  Consultants.” 
Cohen  told  First  Republic  Employee-2  that  he  was  at  Trump  Tower,  and  wanted  to  go  to  a  First 
Republic  branch  across  the  street  to  open  the  account,  so  First  Republic  Employee-2  called,  a 
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preferred  banker  at  that  branch  (“First  Republic  Employee- 1”),  to  assist  Cohen.  At  11:00  a.m., 
First  Republic  Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First 
Republic  Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — 
on  the  same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions, 
including  know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your- 
customer  questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic 
Employee- 1  entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening 
Essential  Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting 
work,  and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States. 
Based  on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the 
“Essential  Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 

f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
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and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  ^again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asldng  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 

22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — with  the 
funds  intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 
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b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  fluids  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee- 1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 

23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction 
with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant 
to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28, 20 1 6,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
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we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD .”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 
who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 
LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
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address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 
Conway,  who  at  the  time  was  Trump’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  20 1 6,  just  three  days  after  the  Clifford  transaction  was  completed 
and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article 
alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy 
model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed 
to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
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lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
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publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across.  The  next 
morning  onNovember  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far  I  see  only 
6  stories.  Getting  little  to  no  traction.”  Hides  responded,  “Same.  Keep  praying!!  It’s  working!” 
Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary,  I  have  a 
statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement.  I  wouldn’t 
use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on  my 
involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced  recorded 
audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a  statement 
could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was  unnecessary  at  that 
time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that  morning,  Pecker 
spoke  to  Tmmp. 
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25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 


have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  hrealdng.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn  ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (u...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  201 6. 
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b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 

| 

\ 

that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 

1 

,  .  t 

payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  m  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 

I 

$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 

d.  On  or  about  March  9,  201 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  Accordingly,  for  the  foregoing  reasons,  there  is  probable  cause  to  believe  that 
Cohen  committed  violations  of  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump 
or  the  Trump  campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  eve  of  the  election. 

Indeed,  while  he  denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has 

admitted  that  he  paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred 

less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about 

his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  | 
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existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident  that 
Cohen  communicated  with  members  of  the  Trump  campaign  about  his  negotiation  with 
Clifford’s  attorney  and  the  need  to  preclude  Clifford  from  making  a  statement  that  would  have 
reflected  negatively  on  the  candidate  in  advance  of  the  forthcoming  election. 

28.  Therefore,  there  is  probable  cause  to  believe  that  a  search  of  the  Subject  Devices 
will  reveal  evidence,  fruit  and  instrumentalities  of  the  Subject  Offenses,  including  the  following: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or 
their  agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump 
and/or  agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen  McDougal, 
or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker, 
and/or  Dylan  Howard  about  Donald  Tmmp,  the  Trump  Campaign,  Stephanie  Clifford,  and/or 
Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination 
or  consultation  with  the  Tmmp  Campaign. 

e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or 
associates  of  the  Tmmp  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws, 
campaign  contribution  reporting  requirements,  and  campaign  contribution  limits. 
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g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject 
Offense,  including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 

III.  Procedures  for  Searching  ESI 
A.  Review  of  ESI 

29.  Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and 
agents,  and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related 
proceedings,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under 
government  control)  will  review  the  ESI  contained  on  the  Subject  Devices  for  information 
responsive  to  the  warrant. 

30.  In  conducting  this  review,  law  enforcement  personnel  may  use  various  methods  to 
locate  evidence,  fruits,  and  instrumentalities  of  the  Subject  Offense,  including  but  not  limited  to 
undertaking  a  cursory  inspection  of  all  emails,  texts  or  files  contained  on  the  Suhj  ect  Devices.  This 
method  is  analogous  to  cursorily  inspecting  all  the  files  in  a  file  cabinet  in  an  office  to  determine 
which  paper  evidence  is  subject  to  seizure.  Although  law  enforcement  personnel  may  use  other 
methods  as  well,  particularly  including  keyword  searches,  I  know  that  keyword  searches  and 
similar  methods  are  typically  inadequate  to  detect  all  information  subject  to  seizure.  As  an  initial 
matter,  keyword  searches  work  only  for  text  data,  yet  many  types  of  files  commonly  associated 
with  emails,  including  attachments  such  as  scanned  documents,  pictures,  and  videos,  do  not  store 
data  as  searchable  text.  Moreover,  even  as  to  text  data,,  keyword  searches  cannot  be  relied  upon 
to  capture  all  relevant  communications  in  an  account,  as  it  is  impossible  to  know  in  advance  all  of 
the  unique  words  or  phrases  that  investigative  subjects  will  use  in  their  communications,  and 
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consequently  there  are  often  many  communications  in  an  account  that  are  relevant  to  an 
investigation  but  that  do  not  contain  any  keywords  that  an  agent  is  likely  to  search  for. 

IV.  Conclusion  and  Ancillary  Provisions 

3 1 .  Based  on  the  foregoing,  I  respectfully  request  the  court  to  issue  a  warrant  to  seize 
the  items  and  information  specified  in  Attachment  A  to  this  affidavit  and  to  the  Search  and  Seizure 
Warrant. 

32.  In  light  of  the  confidential  nature  of  the  continuing  investigation,  and  for  the 
reasons  more  fully  set  forth  in  the  Accompanying  Affidavit,  I  respectfully  request  that  this  affidavit 
and  all  papers  submitted  herewith  be  maintained  under  seal  until  the  Court  orders  otherwise. 


Special  Agent,  US  AO 


Sworn  to  before  me  on 


7th  day  of  April,  201.8  j  t , . 


HON.  HENRY.  B<  PITMAN  .  ; 
UNITED  STATES  MAGISTRATE  JUDGE 


< 


28 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  33  of  80 


Attachment  A 

I.  Devices  to  be  Searched 

The  devices  to  be  searched  (the  “Subject  Devices”)  are  described  as: 

a.  Subject  Device- 1 :  A  black  and  red  U SB  drive  with  a  white  label  that  says  “Tracking 
#:  180208140208.” 

b.  Subject  Device-2:  A  silver  DVD  with  a  white  label  that  reads  “Cohen  — 
2018.03.07.” 

c.  Subject  Device-3:  A  white  DVD  labelled  “2-28-18  Cohen  SW  Returns  —  Google 

and  l&l.” . . . . - 


II.  Review  of  ESI  on  the  Subject  Devices 

Law  enforcement  personnel  (including,  in  addition  to  law  enforcement  officers  and  agents, 
and  depending  on  the  nature  of  the  ESI  and  the  status  of  the  investigation  and  related  proceedings, 
attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the  government  in 
this  investigation,  interpreters,  and  outside  vendors  or  technical  experts  under  government  control) 
are  authorized  to  review  the  ESI  contained  on  the  Subject  Devices  for  evidence,  fruits,  and 
instrumentalities  of  one  or  more  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”),  as  listed  below: 

a.  Evidence  relating  to  payments  to  Stephanie  Clifford,  Karen  McDougal,  or  their 
agents  or  legal  representatives,  including  any  nondisclosure  agreements  and  related 
documents,  and  any  communications  related  to  such  agreements. 

b.  Evidence  of  communications  involving  Michael  Cohen,  Donald  Trump  and/or 
agents  or  associates  of  the  Trump  Campaign  about  Stephanie  Clifford  or  Karen 
McDougal,  or  payments  to  Stephanie  Clifford  or  Karen  McDougal. 

c.  Evidence  of  communications  with  American  Media,  Inc.,  David  Pecker,  and/or 
Dylan  Howard  about  Donald  Trump,  the  Trump  Campaign,  Stephanie  Clifford, 
and/or  Karen  McDougal. 

d.  Evidence  relating  to  Cohen’s  role  in  the  Trump  Campaign,  and  coordination  or 
consultation  with  the  Trump  Campaign. 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  34  of  80 


e.  Evidence  of  communications  with  Donald  Trump  and/or  agents  or  associates  of  the 
Trump  Campaign  about  the  Access  Hollywood  tape. 

f.  Evidence  relating  to  Cohen’s  knowledge  of  the  campaign  finance  laws,  campaign 
contribution  reporting  requirements,  and  campaign  contribution  limits. 

g.  Evidence  indicating  Michael  Cohen’s  intent  with  respect  to  the  Subject  Offense, 
including  whether  the  payment  to  Clifford  and  any  similar  payments  were  made  to 
influence  the  Presidential  election. 
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Exhibit  A 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


filed 

JUL  21  m 


In  the  Matter  of  the  Search  of 
(Briefly  describe  the  property  to  be  searched 
or  identify  the  person  by  name  and  address) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL 
ACCOUNT^^^^^KftGMAlLCOM 


rase-  v17-  rn)-00503 

tola^To'Hwe^erylA. 

S^eTch  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


To: - Anyauthorized-law-enforcement-officer- . . . - . . . ■■ . - . - . - 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  Northern  District  of  _ California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )l 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  August  1,  2017  _ _ _  (not  to  exceed  14  days) 

5^  in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  ^  Hon,  Beryl  A.  Howell  ,  . 

(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C* 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  . _ , _ _ , 

Date  and  time  issued:  /  jy  _ 

/  *  Judge  s  signature 

City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  LLS.  District  Judge 

Printed  name  and  title 
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AO  93  (Rev  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 


Case  No.: 


Date  and  tfnp  warrant  executed: 


inventory  made  in  the  presence  of  ’: 


Copy  of  warrant  and  inventory  left  with: 

G~oo UgJ  -1~>  x S7 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Qr«,M  F,Ls  •.  \isa>oe^ 


j  \cT£>£>ScI'  7'Onc>7\q~  ) 

■A  ^t>r  I* 

^  Prod^4r.-,  F.Lsr 


FILED 

JUL  2 1  2017 

Clerk,  u.S.  District  and 
Bankruptcy  Courts 


Certifies!  tion 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Dale: 


:  fnon&o 


Pruned  name  and  line 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  Google  Mail  Account 
@gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by 
Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043. 
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ATTACHMENT  B 


I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  Google  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
■session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 


2 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  40  of  80 


during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and . 

k.  AH  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”),  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  101.4  (false  statements  to  a  financial 
institution)  and  18  U.S.C.  §  1956  (money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an 
unregistered  foreign  agent)  and  the  Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611 
etseq.,  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,  2016,  including,  for 
each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 

| 

or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 

1 

persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

I 

... _ foreign  principals;  _ _ _ _ __ _ J 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine  | 

the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 

to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s- state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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Exhibit  B 
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AO  93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 

Case:  1:17-mj-00855 
Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 
Assign.  Date  :  11/13/2017 
Description:  Search  and  Seizure  Warrant 

SEARCH  AND  SEIZURE  WARRANT 


In  the  Matter  of  the  Search  of  ) 

(Briefly  describe  the  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address)  ) 

INFORMATION  ASSOCIATED  WITH  THE  EMAIL  ) 

ACCOUNT  IgMAIL.COM  .) 

) 


-To :  Any  authorized  law  enforcement-  officer 


An  application  by  a  federal  law  enforcement  officer  or  ah  attorney  for  the  government  requests  the  search 
of  the  following  person  or  property  located  in  the  _ Northern  District  of  California  I 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location )l 


See  Attachment  A. 


I  find  that  the  affidavits),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized ): 


See  Attachment  B. 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  November  20,  2017  (not  to  exceed  14  days) 
in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 


Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to _ Hon.  Beryl  A.  Howell _ . 

(United  States  Magistrate  Judge) 


□  Pursuant  to  1 8  U.S.C.  .§  3 103 a(b),  I  find  that  immediate  notification  may  have  m  adverse  result  listed  in  1 8  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ _days  (not  to  exceed  JO)  □  until,  the  facts  justifying, the  later  specific  date  of  _ 


Date  and  time  issued: 


City  and  state:  Washington,  DC  Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 

Printed  name  and  title 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  44  of  80 


AO  93  (Rev.  I  l/l  3)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No.: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


: ‘ Certification 

I  declare  under  penalty  qf  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: _ _  .  _ 

Executing  officer  '$  signature 


Printed  name  and  title 
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ATTACHMENT  A 


This  wari’ant  applies  to  information  associated  with  the  Google  Mail  Account 
ggmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Google,  a  company  headquartered  at  1600  Amphitheatre  Parkway,  Mountain  View,  CA  94043, 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Google 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  Or  control  of  the  Google  (hereinafter  “the  Provider”)}  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  fdes,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: 

a.  The  contents  of  al  1  emailsdssociated  witHThe  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  AH  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  Of  connecting; 
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f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a. login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
- — — —  addresses,  Electronic-Serial —Numbers  (“ESN”-), — Mobile— Electronic— Identity- 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  ("SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (‘‘IMSP’),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C,  §  1343  (wire  fraud),  18  U.S.C,  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  an  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C,  §  611  et  seq.,  involving  Michael  Dean 
Cohen  and  occurring  On  or  after  June  1,  2015,  including,  for  each  account  or  identifier  listed  on 
Attachment  A,  Information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to.  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c. 


d. 


e. 


Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 


foreign  principals; 

Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 


the  geographic  and.ehronological  context  of  account  access, .use, 


and  events  relating 


to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  The  identity  of  the  person(s)  who  created  or  used  the  account/including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — Including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  of  foreign  principals, 

III.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  with 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “fitter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  C 
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AG  -93  (Rev.  11/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of 

(Briefly  describe  the  properly  to  be.  searched 
or  identify  the  person  by  name  and  address) 


.INFORMATION  ASSOCIATED  WITH  THE  ACCOUNT 
■  WHICH  IS  STORED  AT  THE 

- PREMISES  OF  1&1  INTERNET,  INC. 


) 

) 

) 

) 

) 

) 


Case:  l;17-mj-00854 

Assigned  To  :  Chief  Judge  Howell,  Beryl  A. 

Assign,  Date :  11/13/2017 

Description:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


-To: - Any  authorized  law  enforcement  officer - — — — — ^ - - - - — - — 

An  .application  by  a  federal  law  enforcement  officer  or  an  attorney  for  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _ Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location ft 


See  Attachment  A. 


1  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B. 


f 


: 


I 

j! 

. 

I 


I 

! 

l 


I 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before 


November  20,  2017 


^  (not  to  exceed  14  days) 


in  the  daytime  6:00  a. m.  to  10:00  pun.  D  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt,  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 
as  required  by  law  and  promptly  return  this  warrant  and  inventory  to  Hon.  Beryl  A.  Howell  . 


(United  States  Magistrate  Judge) 

□  Pursuant  to  18  U.S.G.  §  3l03a(b),  I  find  that  .immediate  notification  may  have  an  adverse  result  listed  in  18  U.3.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

P  for _ days  (not  to  exceed  30)  □  until,  the  facts  justifying,  the  later  specific  date  of  _ _ 


Date-  and  time  issued:  ///  /  Y 

City  and  state:  Washington,  DC 


Judge  V  signature 

Hon.  Beryl  A.  Howell,  Chief  U.S.  District  Judge 


Printed  name  and  title 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Return 

Case  No,: 

Date  and  time  warrant  executed: 

Copy  of  warrant  and  inventory  left  with: 

Inventory  made  in  the  presence  of  : 

Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 

Certification 


1  declare  under  penalty  of  perjury  that  this  inventory'  is  correct  and  was  returned  along  with  the  'original  warrant  to  the 
designated  judge, 


Date: 


Executing  officer 's  signature 


Printed  name  find  title 
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ATTACHMENT  A 


This  warrant  applies  to  information  associated  with  the  email 


is  stored  at  premises  owned,  maintained,  controlled,  or  operated  by  l&l  Internet,  Inc.  (“l&l”),  an 
electronic  communication  and/or  remote  computing  service  provider  headquartered  in  Sunnyvale, 
California. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  l&l 

To  the  extent  that  the  information,  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  the  l&l  (hereinafter  “the  Provider”),  regardless  of  whether  such  information 
is  stored,  held  or  maintained  inside  or  outside  of  the  United  States*  and  including  tiny  emails, 
records,  flies,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the  Provider,  the 
Provider  is  required  to  disclose  the  following  information  to  the  government  for  each  account  or 
identifier  listed  in  Attachment  A: 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  arid 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  arid  dates,  account  status,  alternative  e-mail  addresses  provided 
during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 
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fi  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  of  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 
and 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 

_ 1 _ addresses,  Electronic  Serial  Numbers  (“ESN,?),  Mobile  Electronic  Identity 

Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“MEID”),  Mobile  Identification 
Numbers  ("MIN”),  Subscriber  Identity  Modules  ("SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  ("MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”), 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.G.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1343  (wire  fraud),  18  U.S.C.  §  1344  (bank  fraud),  and  18  U.S.C.  §  1956 
(money  laundering),  as  well  as  18  U.S.C.  §  951  (acting  as  ah  unregistered  foreign  agent)  and  the 
Foreign  Agents  Registration  Act  (“FARA”),  22  U.S.C.  §  611  et  seq.,  involving  Michael  Dean 
Cohen,  including,  for  each  account  or  identifier  listed  on  Attachment  A,  information  pertaining  to 
the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  Or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 
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c.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

d.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 
foreign  principals; 

e.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 

- - - - — the  geograph id and  chronol ogicaf  context  of  account  access,  use,  and  events  relating 

to  the  crimes  under  investigation  and  to  the  account  owner; 

f.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

g.  ■  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 

that  help  reveal  the  whereabouts  of  such  person(s);  and 

h.  The  identity  of  any  person(s) — including  records  that  help  reveal  the  whereabouts 
of  the  person(s) — -who  communicated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Coheh  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals, 

III.  Review  Protocols 

Review  of  the  items  described  in  Attachment  A  and  Attachment  B  shall  be  conducted 
pursuant  to  established  procedures  designed  to  collect  evidence  in  a  manner  consistent  wilh 
professional  responsibility  requirements  concerning  the  maintenance  of  attorney-client  and  other 
operative  privileges.  When  appropriate,  the  procedures  shall  include  use  of  a  designated  “filter 
team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address  potential  privileges. 
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Exhibit  D 
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AO  93  (Rev,  1 1/13)  Search  and  Seizure  Warrant 


United  States  District  Court 

for  the 

District  of  Columbia 


In  the  Matter  of  the  Search  of  .) 

(Briefly  describe  (he  property  to  be  searched  ) 

or  identify  the  person  by  name  and  address )  ) 

INFORMATION  ASSOCIATED  WITH  THE  APPLE  ID  ) 
5JGMAIL.COM  THAT  IS  STORED  AT  ) 
PREMISES  CONTROLLED  BY  APPLE,  INC.  ) 


ase:  17-mj-00570 

ssigned  To  :  Howell,  Beryl  A, 

ssiqn  Date  8/7/2017 

escription:  Search  and  Seizure  Warrant 


SEARCH  AND  SEIZURE  WARRANT 


To:  Any  authorized  law  enforcement  officer 

An  application  by  a  federal  law  enforcement  officer  or  an  attorney  tor  the  government  requests  the  search 

of  the  following  person  or  property  located  in  the  _  Northern _  District  of  _  California 

(identify  the  person  or  describe  the  property  to  be  searched  and  give  its  location)' 


See  Attachment  A. 


I  find  that  the  affidavit(s),  or  any  recorded  testimony,  establish  probable  cause  to  search  and  seize  the  person  or  property 
described  above,  and  that  such  search  will  reveal  (identify  the  person  or  describe  the  property  to  be  seized): 

See  Attachment  B, 


YOU  ARE  COMMANDED  to  execute  this  warrant  on  or  before  August  21,  2Q17  .  ( not  to  exceed  14  days) 

gf  in  the  daytime  6:00  a.m.  to  10:00  p.m.  □  at  any  time  in  the  day  or  night  because  good  cause  has  been  established. 

Unless  delayed  notice  is  authorized  below,  you  must  give  a  copy  of  the  warrant  and  a  receipt  for  the  property  taken  to  the 
person  from  whom,  or  from  whose  premises,  the  property  was  taken,  or  leave  the  copy  and  receipt  at  the  place  where  the 
property  was  taken. 

The  officer  executing  this  warrant,  or  an  officer  present  during  the  execution  of  the  warrant,  must  prepare  an  inventory 

as  required  by  law  and  promptly  return  this  warrant  and  inventory  to _ ___ _ _ JiPJT. Bef^  H°we^ . . . . . . * 

(United  Stales  Magistrate  Judge) 


.  □  Pursuant  to  18  U.S.C.  §  3103a(b),  I  find  that  immediate  notification  may  have  an  adverse  result  listed  in  18  U.S.C. 

§  2705  (except  for  delay  of  trial),  and  authorize  the  officer  executing  this  warrant  to  delay  notice  to  the  person  who,  or  whose 
property,  will  be  searched  or  seized  (check  the  appropriate  box) 

□  for _ days  (not  to  exceed 30)  O  until,  the  facts  justifying,  the  later  specific  date  of _ , _  • _ 


City  and  state:  Washington,  DC 


Hon,  Beryl  A.  Howell,  Chief  U.S.  District  Judge 
Printed  name  and  title 
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AO  93  (Rev.  1 1/13)  Search  and  Seizure  Warrant  (Page  2) 


Case  No.: 


Return 


Date  and  time  warrant  executed: 


Copy  of  warrant  and  inventory  left  with: 


Inventory  made  in  the  presence  of : 


Inventory  of  the  property  taken  and  name  of  any  person(s)  seized: 


Certification 


I  declare  under  penalty  of  perjury  that  this  inventory  is  correct  and  was  returned  along  with  the  original  warrant  to  the 
designated  judge. 


Date: 


Executing  officer's  signature 


Printed  name  and  title 
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ATTACHMENT  A 

This  warrant  applies  to  information  associated  with  the  Apple  ID 
a^gmail.com  that  is  stored  at  premises  owned,  maintained,  controlled,  or  operated 
by  Apple,  Inc.  (“Apple”),  a  company  headquartered  at  1  Infinite  Loop,  Cupertino,  CA  95014. 
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ATTACHMENT  B 

I.  Information  to  be  disclosed  by  Apple,  Inc. 

To  the  extent  that  the  information  described  in  Attachment  A  is  within  the  possession, 
custody,  or  control  of  Apple,  Inc.  (hereinafter  “the  Provider”),  regardless  of  whether  such 
information  is  stored,  held  or  maintained  inside  or  outside  of  the  United  States,  and  including  any 
emails,  records,  files,  logs,  or  information  that  have  been  deleted  but  are  still  available  to  the 
Provider,  the  Provider  is  required  to  disclose  the  following  information  to  the  government  for  each 
account  or  identifier  listed  in  Attachment  A: _ ____ _ _ _ 

a.  The  contents  of  all  emails  associated  with  the  account,  including  stored  or  preserved 
copies  of  emails  sent  to  and  from  the  account,  draft  emails,  the  source  and 
destination  addresses  associated  with  each  email,  the  date  and  time  at  which  each 
email  was  sent,  and  the  size  and  length  of  each  email; 

b.  All  records  or  other  information  regarding  the  identification  of  the  account,  to 
include  full  name,  physical  address,  telephone  numbers  and  other  identifiers, 
records  of  session  times  and  durations,  the  date  on  which  the  account  was  created, 
the  length  of  service,  the  IP  address  used  to  register  the  account,  log-in  IP  addresses 
associated  with  session  times  and  dates,  account  status,  alternative  email  addresses 
provided  during  registration,  methods  of  connecting,  log  files,  and  means  and 
source  of  payment  (including  any  credit  or  bank  account  number); 

c.  The  types  of  service  utilized; 

d.  All  records  or  other  information  stored  at  any  time  by  an  individual  using  the 
account,  including  address  books,  contact  and  buddy  lists,  calendar  data,  pictures, 
and  files; 

e.  All  records  pertaining  to  communications  between  the  Provider  and  any  person 
regarding  the  account,  including  contacts  with  support  services  and  records  of 
actions  taken;  and  other  identifiers,  records  of  session  times  and  durations,  the  date 
on  which  the  account  was  created,  the  length  of  service,  the  types  of  service  utilized, 
the  IP  address  used  to  register  the  account,  log-in  IP  addresses  associated  with 
session  times  and  dates,  account  status,  alternative  e-mail  addresses  provided 
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during  registration,  all  other  user  names  associated  with  the  account,  all  account 
names  associated  with  the  subscriber,  methods  of  connecting; 

f.  All  search  history  or  web  history; 

g.  All  records  indicating  the  services  available  to  subscribers  of  the  accounts; 

h.  All  usernames  associated  with  or  sharing  a  login  IP  address  or  browser  cookie  with 
the  accounts; 

i.  All  cookies,  including  third-party  cookies,  associated  with  the  user; 

j.  All  records  that  are  associated  with  the  machine  cookies  associated  with  the  user; 

— _ — ; - and - — : - — — — — - . - 

k.  All  telephone  or  instrument  numbers  associated  with  the  Account  (including  MAC 
addresses,  Electronic  Serial  Numbers  (“ESN”).  Mobile  Electronic  Identity 
Numbers  (“MEIN”),  Mobile  Equipment  Identifier  (“ME ID”),  Mobile  Identification 
Numbers  (“MIN”),  Subscriber  Identity  Modules  (“SIM”),  Mobile  Subscriber 
Integrated  Services  Digital  Network  Number  (“MSISDN”),  International  Mobile 
Subscriber  Identifiers  (“IMSI”),  or  International  Mobile  Equipment  Identities 
(“IMEI”). 

II.  Information  to  be  Seized  by  the  Government 

All  information  described  above  in  Section  I  that  constitutes  evidence,  contraband,  fruits, 
and/or  instrumentalities  of  violations  of  18  U.S.C.  §  1014  (false  statements  to  a  financial 
institution),  18  U.S.C.  §  1344  (bank  fraud),  18  U.S.C.  §  1956  (money  laundering),  1 8  U.S.C.  §951 
(acting  as  an  unregistered  foreign  agent),  and  22  U.S.C.  §  6 1 1  et  seq.  (Foreign  Agents  Registration 
Act),  involving  Michael  Dean  Cohen  and  occurring  on  or  after  January  1,2016,  including,  for  each 
account  or  identifier  listed  on  Attachment  A,  information  pertaining  to  the  following  matters: 

a.  Communications,  records,  documents,  and  other  files  involving  Essential 
Consultants,  LLC; 

b.  Communications,  records,  documents,  and  other  files  involving  Bo  and  Abe  Realty, 
LLC; 

c.  Communications,  records,  documents,  and  other  files  that  false  representations  to  a 
financial  institution  with  relation  to  intended  the  purpose  of  an  account  or  loan  at 
that  financial  institution;  the  nature  of  any  business  or  entity  associated  with  an 
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account  a  financial  institution;  the  source  of  funds  flowing  into  an  account;  or  the 
purpose  or  nature  of  any  financial  transactions  involving  that  financial  institution; 

d.  Records  of  any  funds  or  benefits  received  by  or  offered  to  Michael  Dean  Cohen  by, 
or  on  behalf  of,  any  foreign  government,  foreign  officials,  foreign  entities,  foreign 
persons,  or  foreign  principals; 

e.  Communications,  records,  documents,  and  other  files  that  reveal  efforts  by  Michael 
Dean  Cohen  to  conduct  activities  on  behalf  of,  for  the  benefit  of,  or  at  the  direction 
of  any  foreign  government,  foreign  officials,  foreign  entities,  foreign  persons,  or 

— _ — foreign  principals; - ■ - - — —  • - — 

f.  Evidence  indicating  how  and  when  the  account  was  accessed  or  used,  to  determine 
the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating 
to  the  crimes  under  investigation  and  to  the  account  owner; 

g.  Evidence  indicating  the  account  owner’s  state  of  mind  as  it  relates  to  the  crimes 
under  investigation; 

h.  The  identity  of  the  person(s)  who  created  or  used  the  account,  including  records 
that  help  reveal  the  whereabouts  of  such  person(s);  and 

i.  The  identity  of  any  person(s)— including  records  that  help  reveal  the  whereabouts 
of  the  person(s)- — who  commun  icated  with  the  account  about  any  matters  relating 
to  activities  conducted  by  Michael  Dean  Cohen  on  behalf  of,  for  the  benefit  of,  or 
at  the  direction  of  any  foreign  government,  foreign  officials,  foreign  entities, 
foreign  persons,  or  foreign  principals. 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


El  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Accounts 
§)gmail.com,  . 
|@gmail.com,  and 

Maintained  at 
Premises  Controlled  by  Google,  Inc., 
US  AO  Reference  No.  2018R00127 


Search  Warrant  and  Non-Disclosure  Order 

TO:  Google,  Inc,  (“Provider”) 


United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 

United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the' provisions  of  the 
Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  accounts  @gmail.com,  S)gmail.com,  and 

,  maintained  at  premises  controlled  by  Google,  Inc.,  contain  evidence, 
fruits,  and  instrumentalities  of  crime,  all  as  specified  in  Attachments  A  and  B  hereto.  Accordingly, 
the  Provider  is  hereby  directed  to  provide  to  the  Investigative  Agencies,  within  7  days  of  the  date 
of  service  of  this  Warrant  and  Order,  the  records  specified  in  Section  II  of  Attachments  A  and  B 
hereto,  for  subsequent  review  by  law  enforcement  personnel  as  authorized  in  Sections  III  and  IV 
of  Attachments  A  and  B.  The  Government  is  required  to  serve  a  copy  of  this  Warrant  and  Order 
on  the  Provider  within  7  days  of  the  date  of  issuance.  The  Warrant  and  Order  may  be  served  via 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent 
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electronic  transmission  or  any  other  means  through  which  the  Provider  is  capable  of  accepting 
service. 

2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 
tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 
existence  of  this  Warrant-arid'  Order  to  the  listed  subscriberor  to  any  other  person- fora-period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessary,  except  that  Provider  may  disclose  this  Warrant  and  Order  to  an  attorney  for  Provider 
for  the  purpose  of  receiving  legal  advice. 


3.  Sealing.  It  is  further  ordered  that  tins  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 


obligations  in  any  prosecutions  related  to  this  matter. 


Dated:  New  York,  New  York 


U I S 


]orM(i4/^ 


Date  Issued 


Time  Iss”~J 


Southern  District^ Yprk' 


02.28.2018 
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Email  Search  Attachment  A 
I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email  account 
lilgmail.com  (the  “Subject  Account”)  for  the  time  period  referenced  below. 

A  law-enforcement-  officer  will-servefhis-warrant  by  transmitting- it-via  email  or-another- 


appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content.  All  emails  sent  to  or  horn,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email) 
limited  to  items  sent,  received,  or  created  between  November  14, 2017  and  the  date  ofthis  warrant, 
inclusive. 


b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  IP  logs  or  other  records  of  session  times  and  durations,  limited  to  items  sent, 
received,  or  created  between  December  1, 2014  and  the  date  of  this  warrant,  inclusive. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  (lie  Subject  Account,  including  complaints,  inquiries,  or  oilier  contacts  with  support  services 
and  records  of  actions  taken,  limited  to  items  sent,  received,  or  created  between  December  1, 20 14 
and  the  date  of  this  warrant,  inclusive. 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Account,  limited  to  items  sent,  received,  or  created  between  December  1, 2014  and  the  date  ofthis 
warrant,  inclusive. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  and  instant 
messages  or  Gchats  associated  with  the  Subject  Account,  limited  to  items  sent,  received,  or  created 
between  December  1,2014  and  the  date  of  this  warrant,  inclusive. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

HI.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  ofviolations  of  18  U.S.C.  §§  371  (conspiracyto  commit  offense  or  to  defraud 
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the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and/or  taxi  medallions; 

c.  Communications,  recordsydocuments,  and  other  files  involving  a  pian,  proposal^  or 

agreement  for  Michael  D .  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to  and/or 

entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
T.T.C  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 

e.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the  person(s)  —  who 
communicated  with  the  Subject  Account  about  any  matters  relating  to  Essential  Consultants,  LLC, 
or  about  any  plan  or  proposal  or. agreement  for  Michael  D.  Cohen  and/or  entities  associated  with 
him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or  liabilities,  to  others, 
including  to  j  and/or  entities  associated  with  him; 

f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
•to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
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institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 

IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 


4 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  70  of  80 


Email  Search  Attachment  B 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  Google,  Inc.  (the  “Provider”),  headquartered  at  1600 
Amphitheatre  Parkway,  Mountain  View,  California  94043,  and  applies  to  all  content  and  other 
information  within  the  Provider’s  possession,  custody,  or  control  associated  with  the  email 
accounts  |^^^|gmail.com  and  ^^^^|(the  “Subject  Accounts”)  for  the  time 

period  between-October-  1,-2016  and  the-date-of-this  warrant,  inclusive - — — - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  manner  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Accounts: 

a.  Email  content.  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Accounts,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  book  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Accounts. 

c.  Subscriber  and  payment  information.  All  subscriber  and  payment  information 
regarding  the  Subject  Accounts,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Accounts, 
including  any  IP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 

with  the  Subject  Accounts,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  records  of  actions  taken, - - — — - — — — - 

f.  Search  History.  All  search  history  and/or  web  history  associated  with  the  Subject 
Accounts. 

g.  Associated  content.  All  Google  Docs,  files  maintained  on  Google  Drive,  'and  instant 
messages  or  Gchats  associated  with  the  Subject  Accounts. 

h.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

m.  Review  of  Information  by  the  Government 

Law  enforcement  personnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical,  experts  under  government  control)  are 
-authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  18U.S.C.  §§  371  (conspiracyto  commit  offense  or  to  defraud 
the  United  States),  1005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identify 
of  the  person(s)  who  created  or  used  the  Subject  Accounts; 

2 
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b.  Communications,  records,  documents,  and  other  files  involving  a  plan  or  proposal  or 

agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  and/or  entities  associated 

with  him; 

c.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 

of  any  person(s)  —  including  records  that  reveal  the  whereabouts  of  the  person(s)  -  who 
communicated- with  the  Subject  Accounts  about  any  matters  relating-to  any  plan  or  proposal  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
medallions,  and  any  associated  debts  or  liabilities,  to  md/or  entities  associated 

with  him; 

d.  Communications  between  the  Subject  Accounts  and  others,  including  employees  or 
representatives  of  Sterling  National  Bank,  Melrose  Credit  Union,  or  other  financial  institution(s), 
regarding  Michael  D.  Cohen’s  finances; 

e.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with  relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  into  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

f.  Evidence  indicating  how  and  when  the  Subject  Accounts  was  accessed  or  used,  to 

determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  .  . 

g.  Evidence  indicating  the  Subject  Accounts  owners’  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


' 
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Exhibit  F 
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UNTIED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  the  Matter  of  a  Warrant  for  All 
Content  and  Other  Information 
Associated  with  the  Email  Account 
maintained  at 

Premises  Controlled  by  1  &  1  Internet, 
Inc.,  USAO  Reference  No. 
2018R00127 


Search  Warrant’  and  Non-IHsciostre  Order - — 

TO:  1  &  1  Internet,  Inc.  (“Provider”) 

United  States  Attorney’s  Office  for  the  Southern  District  of  New  York  and  the  Federal 
Bureau  of  Investigation  (collectively,  the  “Investigative  Agencies”) 


1.  Warrant.  Upon  an  affidavit  of  Special  Agent  of  the  United  States 

Attorney’s  Office  for  the  Southern  District  of  New  York,  and  pursuant  to  the  provisions  of  the 


Stored  Communications  Act,  18  U.S.C.  §  2703(b)(1)(A)  and  §  2703(c)(1)(A),  and  the  relevant 
provisions  of  Federal  Rule  of  Criminal  Procedure  41,  the  Court  hereby  finds  there  is  probable 
cause  to  believe  the  email  account  |  naintained  at  premises  controlled  by  1 

&  1  Internet,  Inc.,  contains  evidence,  fruits,  and  instrumentalities  of  crime,  all  as  specified  in 
Attachment  D  hereto.  Accordingly,  the  Provider  is  hereby  directed  to  provide  to  the  Investigative 


Agencies,  within  7  days  of  the  date  of  service  of  this  Warrant  and  Order,  the  records  specified  in 
Section  II  of  Attachment  D  hereto,  for  subsequent  review  by  law  enforcement  personnel  as 
authorized  in  Sections  III  and  IV  of  Attachment  D.  The  Government  is  required  to  serve  a  copy 
of  this  Warrant  and  Order  on  the  Provider  within  14  days  of  the  date  of  issuance.  The  Warrant 
and  Order  may  be  served  via  electronic  transmission  or  any  other  means  through  which  the 
Provider  is  capable  of  accepting  service. 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  76  of  80 


2.  Non-Disclosure  Order.  Pursuant  to  18  U.S.C.  §  2705(b),  the  Court  finds  that  there  is 
reason  to  believe  that  notification  of  the  existence  of  this  warrant  will  result  in  destruction  of  or 


tampering  with  evidence  or  flight  from  prosecution,  or  otherwise  will  seriously  jeopardize  an 
ongoing  investigation.  Accordingly,  it  is  hereby  ordered  that  the  Provider  shall  not  disclose  the 


existence  of  this  Warrant  and  Order  to  the  listed  subscriber  or  to  any  other  person  for  a  period  of 
180  days  from  the  date  of  this  Order,  subject  to  extension  upon  application  to  the  Court  if 
necessaryyexceptthatProviderTxiay  disclose  this  Warrant  and  Order -to  an  attomey-for-Provider 
for  the  purpose  of  receiving  legal  advice. 

3.  Sealing.  It  is  further  ordered  that  this  Warrant  and  Order,  and  the  Affidavit  upon  which 
it  was  issued,  be  filed  under  seal,  except  that  the  Government  may  without  further  order  of  this 
Court  serve  the  Warrant  and  Order  on  the  Provider;  provide  copies  of  the  Affidavit  or  Warrant  and 
Order  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Date  Issued 


Time  Isi 


02.28.2018 


2 


Case  l:18-cr-00602-WHP  Document  48-6  Filed  07/18/19  Page  77  of  80 


Email  Search  Attachment  D 

I.  Subject  Account  and  Execution  of  Warrant 

This  warrant  is  directed  to  1  &  1  Internet,  Inc.  (the  “Provider”),  headquartered  at  701  Lee 
Road,  Suite  300,  Chesterbrook,  Pennsylvania  19087,  and  applies  to  all  content  and  other 
information  within  the  Provider 5  s  possession,  custody,  or  control  associated  with  the  email  account 
(the  “Subject  Account”)  for  the  time  period  between  November  14,  2017 
and  the  date  of  this  warrant,  inclusive. - — — - - — — — — - — 

A  law  enforcement  officer  will  serve  this  warrant  by  transmitting  it  via  email  or  another 
appropriate  maimer  to  the  Provider.  The  Provider  is  directed  to  produce  to  the  law  enforcement 
officer  an  electronic  copy  of  the  information  specified  in  Section  II  below.  Upon  receipt  of  the 
production,  law  enforcement  personnel  will  review  the  information  for  items  falling  within  the 
categories  specified  in  Section  III  below. 

II.  Information  to  be  Produced  by  the  Provider 

To  the  extent  within  the  Provider’s  possession,  custody,  or  control,  the  Provider  is  directed 
to  produce  the  following  information  associated  with  the  Subject  Account: 

a.  Email  content  All  emails  sent  to  or  from,  stored  in  draft  form  in,  or  otherwise 
associated  with  the  Subject  Account,  including  all  message  content,  attachments,  and  header 
information  (specifically  including  the  source  and  destination  addresses  associated  with  each 
email,  the  date  and  time  at  which  each  email  was  sent,  and  the  size  and  length  of  each  email). 

b.  Address  hook  information.  All  address  book,  contact  list,  or  similar  information 
associated  with  the  Subject  Account. 

c.  Subscriber  and  payment  information.  All  subscriber  “and  payment  information 
regarding  the  Subject  Account,  including  but  not  limited  to  name,  username,  address,  telephone 
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number,  alternate  email  addresses,  registration  IP  address,  account  creation  date,  account  status, 
length  of  service,  types  of  services  utilized,  means  and  source  of  payment,  and  payment  history. 

d.  Transactional  records.  All  transactional  records  associated  with  the  Subject  Account, 
including  any  DP  logs  or  other  records  of  session  times  and  durations. 

e.  Customer  correspondence.  All  correspondence  with  the  subscriber  or  others  associated 
with  the  Subject  Account,  including  complaints,  inquiries,  or  other  contacts  with  support  services 
and  recordsrofactions  taken;  ' 

f.  Preserved  or  backup  records.  Any  preserved  or  backup  copies  of  any  of  the  foregoing 
categories  of  records,  whether  created  in  response  to  a  preservation  request  issued  pursuant  to  18 
U.S.C.  §  2703(f)  or  otherwise. 

IH.  Review  of  Information  by  the  Government 

Law  enforcement  p  ers  onnel  (who  may  include,  in  addition  to  law  enforcement  officers  and 
agents,  attorneys  for  the  government,  attorney  support  staff,  agency  personnel  assisting  the 
government  in  this  investigation,  and  outside  technical  experts  under  government  control)  are 
authorized  to  review  the  records  produced  by  the  Provider  in  order  to  locate  any  evidence,  fruits, 
and  instrumentalities  of  violations  of  1 8  U.S.C.  §§  371  (conspiracy  to  commit  offense  or  to  defraud 
the  United  States),  1 005  (false  bank  entries);  1014  (false  statements  to  a  financial  institution),  1343 
(wire  fraud),  and  1344  (bank  fraud),  including  the  following: 

a.  Communications,  records,  documents,  and  other  files  necessary  to  establish  the  identity 
of  the  person(s)  who  created  or  used  the  Subject  Account; 

b.  Communications,  records,  documents,  and  other  files'  involving  Sterling  National 
Bank,  Melrose  Credit  Union,  and / or  taxi  medallions ; 

c.  Communications,  records,  documents,  and  other  files  involving  a  plan,  proposal,  or 
agreement  for  Michael  D.  Cohen  and/or  entities  associated  with  him  to  transfer  any  interest  in  taxi 
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medallions,  and  any  associated  debts  or  liabilities,  to  others,  including  to 


ind/or 


entities  associated  with  him; 

d.  Communications,  records,  documents,  and  other  files  involving  Essential  Consultants, 
LLC  or  Michael  D.  Cohen  &  Associates,  including  those  which  indicate  the  nature  and  purpose  of 
payments  made  to  or  from  Essential  Consultants  or  Michael  D.  Cohen  &  Associates; 


e.  The  identity  of  any  person(s)  -  including  records  that  reveal  the  whereabouts  of  the 


“person(s)  —  whomommunicated:  with thrr Subject  Account  about  any  matters  relating  to  Essential- 
Consultants,  LLC,  or  about  any  plan  or  proposal  or  agreement  for  Michael  D.  Cohen  and/or  entities 


associated  with  him  to  transfer  any  interest  in  taxi  medallions,  and  any  associated  debts  or 


and/or  entities  associated  with  him; 


liabilities,  to  others,  including  to 


f.  Communications  between  the  Subject  Account  and  Jeffrey  Getzel  relating  to  Michael 
D.  Cohen’s  bank  accounts,  taxes,  debts,  and/or  finances; 

g.  Communications,  records,  documents,  and  other  files  reflecting  false  representations 
to  a  financial  institution  with- relation  to  the  intended  purpose  of  an  account  or  loan  at  that  financial 
institution;  the  nature  of  any  business  or  entity  associated  with  an  account  at  a  financial  institution; 
the  source  of  funds  flowing  irito  an  account;  or  the  purpose  or  nature  of  any  financial  transactions 
involving  that  financial  institution; 

h.  Evidence  indicating  how  and  when  the  Subject  Account  was  accessed  or  used,  to 
determine  the  geographic  and  chronological  context  of  account  access,  use,  and  events  relating  to 
the  crimes  under  investigation  and  to  the  account  owner;  and 

i.  Evidence  indicating  the  Subject  Account  owner’s  intent  as  it  relates  to  the  Subject 
Offenses  under  investigation. 


02.28.2018 
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IV.  Review  Protocols 

Review  of  the  items  described  in  this  Attachment  shall  be  conducted  pursuant  to 
established  procedures  designed  to  collect  evidence  in  a  manner  reasonably  designed  to  protect 
any  attorney-client  or  other  applicable  privilege.  When  appropriate,  the  procedures  shall  include 
use  of  a  designated  “filter  team,”  separate  and  apart  from  the  investigative  team,  in  order  to  address 
potential  privileges. 


02.28.2018 


Case  l:18-cr-00602-WHP  Document 48-7  Filed  07/18/19  Page  lot 38 


MAG 

UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellphones  Assigned  Call  Numbers 

USAO  Reference  No.  2018R00127 


WARRANT  AND  ORDER 


18  Mag. 


Warrant  and  Order 

for  Cellphone  Location  Information  and  Pen  Register  Information 
and  for  Sealing  and  Non-Disclosure 

TO:  AT&T  (“Service  Provider”),  and  any  subsequent  provider  of  service  to  the  Target 

Cellphones  specified  below  (“Subsequent  Service  Provider”) 

United  States  Attorney’s  Office  and  Federal  Bureau  of  Investigation  (“Investigative 
Agencies”) 

Upon  the  Application  and  Agent  Affidavit  submitted  by  the  Government  in  this  matter: 

I.  Findings 

The  Court  hereby  finds: 

1.  The  Target  Cellphones  (the  “Target  Cellphones”)  that  are  the  subject  of  this  Order  are 

assigned  call  numbers  and  ,  are  subscribed  to  in  the  name  of  Michael 

Cohen  (the  “Subscriber”)  and  are  currently  serviced  by  the  Service  Provider. 

2.  Pursuant  to  18  U.S.C.  §  2703(c)(1)(A)  and  the  applicable  provisions  of  Rule  41  of  the 
Federal  Rules  of  Criminal  Procedure,  the  Government’s  application  sets  forth  probable  cause  to 
believe  that  the  prospective  and  historical  location  information  for  the  Target  Cellphone  will  reveal 
evidence,  fruits,  or  instrumentalities  of  suspected  violations  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (“the  Subject  Offense”). 

3.  Pursuant  to  18  U.S.C.  §  2703(d),  the  Government’s  application  also  sets  forth  specific 
and  articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  historical 
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location  information  and  toll  records  for  the  Target  Cellphone  are  relevant  and  material  to  an 
ongoing  criminal  investigation. 

4.  Pursuant  to  18  U.S.C.  §  3 123(b)(1),  the  Government  has  certified  that  the  pen  register 
information  for  the  Target  Cellphones  is  relevant  to  an  ongoing  investigation  by  the  Investigating 
Agencies  of  Michael  Cohen  and  others  unknown  in  connection  with  suspected  violations  of  the 
Subject  Offense. 

5.  Pursuant  to  18  U.S.C.  §  2705(b),  there  is  reason  to  believe  that  notification  of  the 
existence  of  this  Warrant  and  Order  will  result  in  destruction  of  or  tampering  with  evidence,  danger 
to  the  physical  safety  of  an  individual,  flight  from  prosecution,  and/or  intimidation  of  potential 
witnesses,  or  otherwise  will  seriously  jeopardize  an  ongoing  investigation. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41, 18  U.S.C.  §§  3121  etseq.,  18  U.S.C. 
§§  2701  etseq.,  and  18  U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 

II.  Order  to  Service  Provider 

6.  Service  Provider.  This  Order  shall  apply  to  the  Service  Provider  specified  above,  and 
to  any  subsequent  provider  of  service  to  the  Target  Cellphones  without  need  for  further  Order  of 
this  Court. 

7.  Prospective  Location  Information.  The  Service  Provider  shall  provide  to  the 
Investigating  Agencies  on  a  prospective  basis,  for  a  period  of  45  days  from  the  date  of  this  Order 
(or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  information  concerning 
the  location  of  the  Target  Cellphones  (“Prospective  Location  Information”),  including  all 
available: 

a.  precision  location  information,  including  GPS  data,  E-911  Phase  II  data,  and 
latitude-longitude  data;  and 
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b.  cell  site  data,  including  any  data  reflecting  (a)  the  cell  towers  and  sectors  thereof 
utilized  in  routing  any  phone,  text,  or  data  conununication  to  or  from  the  Target  Cellphones,  and 
(b)  the  approximate  range  of  the  target  phone  from  the  cell  towers  during  the  communication 
(including  per-call  measurement  (“PCM”)  or  round-trip  time  (“RTT”  or  “NELOS”)  data); 

8.  Historical  Location  Information  and  Toll  Records.  The  Service  Provider  shall 
provide  to  the  Investigating  Agency  all  available  historical  cell  site  location  information  reflecting 
the  cell  towers  and  sectors  thereof  utilized  in  routing  any  phone,  text,  or  data  communication  to  or 
from  the  Target  Cellphones,  and  the  approximate  range  of  the  target  phone  from  the  cell  towers 
during  the  communication  (PCM/RTT  or  NELOS  data),  for  the  period  from  October  1,  2016 

^  l  f 

tlmoirgh-therdate-ofThis'Qrder,  as  well  as  all  available  toll  records  (including  call  detail,  SMS  detail, 
or  data  session  detail  records)  for  the  communications.  ^  ^ 

9.  Pen  register  with  caller  identification  and/or  trap  and  trace  device.  The  Service 

Provider  shall  provide  to  the  Investigating  Agencies,  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first),  all  dialing,  routing, 
addressing,  or  signaling  information  associated  with  each  voice,  text,  or  data  communication 
transmitted  to  or  from  the  Target  Cellphones,  including  but  not  limited  to:  (  -- 

a.  any  unique  identifiers  associated  with  the  phone,  including  ESN,  MEIN, 

MSISDN,  IMSI,  IMEI,  SIM,  MIN,  or  MAC  address; 

b.  source  and  destination  telephone  numbers  and/or  Internet  protocol  (“IP”) 

addresses;1 * 3 


1  The  Service  Provider  is  not  required  to  provide  post-cut-through  dialed  digits  (“PCTDD”),  or 

digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been  connected.  If  possible, 
the  Service  Provider  will  forward  only  pre-cut-through-dialed  digits  to  the  Investigative  Agency. 
However,  if  the  Service  Provider’s  technical  capabilities  require  it  to  forward  all  dialed  digits, 
including  PCTDD,  to  the  Investigative  Agency,  the  Investigative  Agency  will  only  decode  and 

3 
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c.  date,  time,  and  duration  of  the  communication;  and 

d.  cell-site  information  as  specified  above. 

10.  Technical  Assistance.  The  Service  Provider  shall  furnish  the  Investigating  Agency  all 
information,  facilities,  and  technical  assistance  necessary  to  accomplish  the  disclosure  of  all  of  the 
foregoing  information  relating  to  the  Target  Cellphones  unobtrusively  and  with  the  minimum 
interference  to  the  service  presently  provided  to  the  Subscriber. 

1 1 .  Non-Disclosure  to  Subscriber.  The  Service  Provider,  including  its  affiliates,  officers, 
employees,  and  agents,  shall  not  disclose  the  existence  of  this  Warrant  and  Order,  or  the  underlying 
investigation,  to  the  Subscriber  or  any  other  person,  for  a  period  of  180  days  from  the  date  of  this 
Warrant  and  Order,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

III.  Additional  Provisions 

12.  Compensation  for  Costs.  The  Investigating  Agency  shall  compensate  the  Service 
Provider  for  reasonable  expenses  incurred  in  complying  with  the  Warrant  and  this  Order. 

13.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Application  and  Agent  Affidavit, 
shall  he  sealed  until  otherwise  ordered  by  the  Court,  except  that  the  Government  may  without 
further  order  of  this  Court:  serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies 
of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent  Affidavit  as  need  be  to 


forward  to  the  agents  assigned  to  the  investigation,  the  numbers  that  are  dialed  before  the  call  is 
cut  through. 


2017.02.09 
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personnel  assisting  the  Government  in  the  investigation  and  prosecution  of  this  matter;  and 
disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure  obligations  in  any 
prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


(:■  /"/  / 


Date  Issued 


Time  Issued 


Ul  JUDGE 

Southern  District  of  New  York 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For 
Prospective  and  Historical  Location 
Information  and  Pen  Register 
Information  for  the  Cellphones 
Assigned  Call  Numbers 
and  US  AO  Reference 

No.  2018R00127 


i 

APPLICATION 
18  Mag. _ 


Application  for  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 

The  United  States  of  America,  by  its  attorney,  Robert  Khuzami,  Attorney  for  the  United 
States  Acting  Under  Authority  Conferred  by  28  U.S.C.  §  515,  Assistant  United 

States  Attorney,  of  counsel,  respectfully  requests  that  the  Court  issue  the  accompanying  proposed 
Warrants  and  Orders  for  prospective  and  historical  location  information  and  pen  register 
information  for  two  cellphones  (the  “Target  Cellphones”).  As  grounds  for  this  Application  the 
Government  relies  on  the  following  facts  and  authorities. 

I.  Introduction 

1 .  I  am  an  Assistant  United  States  Attorney  in  the  U.  S .  Attorney  ’  s  Office  for  the  Southern 
District  of  New  York.  This  Application  is  submitted  in  conjunction  with  the  accompanying 
affidavit  of  a  law  enforcement  agent  (“Agent  Affidavit”),  to  be  sworn  before  this  Court,  and 
incorporated  by  reference  herein.  I  make  this  Application  based  on  information  and  belief, 
including  the  Agent  Affidavit,  my  review  of  other  documents  in  the  case,  and  information  received 
from  investigative  personnel. 
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2.  The  Investigating  Agency,  Target  Cellphones,  Subscriber,  Target  Subject(s),  Service 
Provider,  Subject  Offenses,  Successor  Service  Provider,  and  Successor  Cellphones  referenced  in 
this  Application  are  as  specified  in  the  Agent  Affidavit. 

II.  Legal  Authority 

A.  Prospective  Location  Information 

3.  The  Government  seeks  to  obtain  both  precision  location  information  and  cell  site  data 
for  the  Target  Cellphones  on  a  prospective  basis  (the  “Prospective  Location  Information”)  for  a 


period  of  45  days  from  the  date  of  this  order  -  the  same  period  of  time  for  which  a  warrant  for  a 
tracking  device  may  be  granted  under  Rule  41(e)(2)(C).  It  bears  noting,  however,  that  while  the 
Prospective  Location  Information  may  permit  “tracking”  the  user  of  the  phone  in  the  colloquial 
sense,  this  is  not  an  application  for  a  warrant  for  a  “tracking  device”  as  defined  in  Fed.  R.  Crim. 
P.  41(a)(2)(E)  and  18  U.S.C.  §  3 1 17(b).  Those  provisions  only  apply  where  an  agent  is  seeking  to 
physically  install  a  tracking  device  on  a  given  object.  Instead,  the  Prospective  Location 
Information  will  be  obtained  by  requiring  the  Service  Provider  to  provide  the  information. 

4.  The  authority  for  this  application  is  found  in  18  U.S.C.  §§  2703(c)(1),  which  authorizes 
a  court  of  competent  jurisdiction  to  require  any  electronic  communication  service  provider  (which 
includes  a  cellular  telephone  service  provider1)  to  disclose  any  “record  or  other  information 
pertaining  to  a  subscriber”  other  than  the  “contents  of  communications,”  when  the  government 
obtains,  inter  alia,  a  warrant  under  the  procedures  of  Rule  41.  See  18  U.S.C.  §  2703(c)(1)(A).2 


1  See  18  U.S.C.  §  2711(1)  (incorporating  by  cross-reference  statutory  definitions  set  forth  in  18 
U.S.C.  §  2510);  18  U.S.C.  §  2510(15)  (defining  “electronic  communication  service”  as  “any 
service  which  provides  to  users  thereof  the  ability  to  send  or  receive  wire  or  electronic 
communications”) . 

2  Another  provision  of  18  U.S.C.  §  2703(c)(1),  specifically,  §  2703(c)(1)(B),  enables  the 
Government  to  compel  an  electronic  communication  service  provider  to  disclose  non-content 
information  pertaining  to  a  subscriber  by  obtaining  an  order  issued  under  18  U.S.C.  §  2703(d), 
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Because  data  concerning  a  subscriber’s  location,  such  as  precision  location  information  and  cell 
site  data,  constitutes  “information  pertaining  to  a  subscriber”  that  does  not  include  the  “contents 
of  communications,”  that  data  is  among  the  types  of  information  available  under  §  2703(c)(1)(A).* * 3 
Further,  as  specified  in  18  U.S.C.  §  2711(3),  this  Court  is  a  court  of  competent  jurisdiction  under 
the  Stored  Communications  Act  because  it  has  jurisdiction  over  the  Subject  Offenses. 

5.  The  Government’s  request  for  cell  site  data  also  implicates  the  pen  register  statute, 
because  such  data  constitutes  signaling  information  used  by  the  Service  Provider  to  route 
communications  to  and  from  the  Target  Cellphones.  In  order  to  collect  such  data,  a  valid  pen 
register  order  is  required.4  Accordingly,  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  such 


instead  of  a  warrant.  Rather  than  requiring  a  showing  of  probable  cause,  a  §  2703(d)  order  requires 
only  a  showing  that  there  are  reasonable  grounds  to  believe  that  the  information  sought  is  relevant 
and  material  to  an  ongoing  criminal  investigation.  However,  given  that  continued  monitoring  of 
an  individual’s  specific  location  through  precision  location  information  arguably  implicates  Fourth 

Amendment  interests,  see  United  States  v.  Jones,  565  U.S.  400,  418  (2012)  (Alito,  J.,  concurring 
in  the  judgment),  the  Government  here  seeks  to  obtain  the  Precision  Location  Information  sought 
herein  by  a  §  2703(c)  warrant  rather  than  a  §  2703(d)  order. 

3  See  In  re  Application,  460  F.  Supp.  2d  448,  459-60  &  n.  55  (S.D.N.Y.  2006)  (Kaplan,  J.) 
(cellphone  location  information  falls  within  §  2703(c)(1));  accord,  e.g. ,  United  States  v.  Caraballo, 
963  F.  Supp.  2d  341,  361  (D.Vt.  2013);  In  re  Order,  632  F.  Supp.  2d  202,  207  (E.D.N.Y.  2008); 
In  re  Application,  405  F.  Supp.  2d  435,  444-45  (S.D.N.Y.  2005).  But  see  In  re  Application,  849 
F.  Supp.  2d  526, 574  (D.Md.  2011)  (rejecting  view  that  cellular  location  data  falls  within  the  scope 
of  the  SCA  and  finding  that  phone  must  be  treated  as  “tracking  device”  for  purposes  of  Rule  41 
where  used  to  collect  location  data);  In  re  Application,  2009  WL  159187,  at  *5-*6  (S.D.N.Y. 
Jan.  13, 2009)  (McMahon,  J.)  (same). 

4  See  18  U.S.C.  §  3121  (prohibiting  use  of  pen  register  or  trap  and  trace  device  without  an  order 
under  the  pen  register  statute);  3127(3)  &  (4)  (defining  pen  register  and  trap  and  trace  device  to 
include  devices  or  processes  that  record,  inter  alia,  signaling  information).  Although  cell  site  data 
constitutes  “signaling”  information  within  the  meaning  of  the  pen  register  statute,  a  separate  statute 
precludes  the  Government  from  relying  “solely”  on  the  authority  provided  by  the  pen  register 
statute  to  ascertain- a  subscriber’s  location.  47  U.S.C.  §  1002(a).  Here,  the  Government  seeks  to 
obtain  such  data  pursuant  to  18  U.S.C.  §  2703(c)  as  well  as  the  pen  register  statute,  rather  than 
“solely”  under  the  latter  statute.  See  In  re  Application,  460  F.  Supp.  2d  at  456-59. 
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signaling  information  is  relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating 
Agency  into  suspected  violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

B.  Historical  Location  Information 

6.  The  Government  also  seeks  historical  cell  site  data  for  the  Target  Cellphones  for  the 

1)  dvA  fit  /y  fO  i^>  TU  f  CGKjO  T 

period  from  October  1, 2016  to  tfee-pr-esewt  (the  “Historical  Location  Information”).  Because  such 

data  constitutes  non-content  information  concerning  a  subscriber,  the  Court  is  authorized  to  order 

the  Service  Provider  to  provide  this  data  pursuant  to  a  warrant  application  under  18  U.S.C.  § 


2703(c)  or  an  application  for  an  order  under  1 8  U.S.C.  §  2703(d).  See  1 8  U.S.C.  §  2703(c)(1)(B). 
Pursuant  to  18  U.S.C.  §  2703(d),  I  respectfully  submit  that  the  Agent  Affidavit  offers  specific  and 
articulable  facts  showing  that  there  are  reasonable  grounds  to  believe  that  the  Historical  Location 
Information  is  relevant  and  material  to  an  ongoing  criminal  investigation.  Further,  although  a 
warrant  for  the  Historical  Location  Information  is  not  required,  I  respectfully  submit  that  the  same 
probable  cause  supporting  the  Government’s  request  for  a  warrant  to  obtain  the  Prospective 
Location  Information  requested  above  also  supports  the  issuance  of  a  warrant  under  §  2703(c)  for 
the  Historical  Location  Information.5  In  addition,  the  Government  seeks  toll  records  for  the  same 


5  A  warrant  is  not  required  to  obtain  historical  cell  site  information.  Individuals  do  not  have  a 
reasonable  expectation  of  privacy  in  historical  cell  site  information  because  individuals  voluntarily 
convey  that  information  to  third-party  service  providers.  See  United  States  v.  Graham,  824  F.3d 
421,  424-25  (4th  Cir.  2016)  ( en  banc)',  United  States  v.  Davis,  785  F.3d  498,  511-13  (11th  Cir. 
2015)  {en  banc),  cert,  denied,  136  S.  Ct.  479  (2015);  In  re  Application  of  U.S.  for  Historical  Cell 
Site  Data,  724  F.3d  600,  614-15  (5th  Cir.  2013);  United  States  v.  Guerrero,  768  F.3d  351,  358-59 
(5th  Cir.  2014);  see  also  United  States  v.  Pascual,  502  F.  App’x  75,  80  &  n.6  (2d  Cir.  2012),  cert, 
denied,  134  S.  Ct.  231  (2013)  (“general  principles”  of  third-party  doctrine  “point[]”  toward  this 
conclusion  regarding  cell-site  records);  but  see  United  States  v.  Ulbricht,  858  F.3d  71,  97  n.29  (2d 
Cir.  2017)  (declining  to  express  its  view  as  to  whether  the  Fourth  Amendment  applies  to  historical 
cell  site  location  information).  Moreover,  because  historical  cell  site  information  does  not  enable 
law  enforcement  to  conduct  live  monitoring  of  a  person’s  location  within  private  spaces  such  as 
“the  interior  of  the  [person’s]  home,”  it  is  not  comparable  to  prospective  precision  location 
information,  for  which  a  warrant  is  arguably  required.  See  In  re  Application  of  U.S.  for  Order 
Directing  Provider  of  Elec.  Commc’n  Serv.  to  Disclose  Records  to  Gov’t,  620  F.3d  304,  312-15 
(3d  Cir.  2010).  Nevertheless,  because  the  Supreme  Court  has  recently  granted  certiorari  to  review 
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period  as  the  Historical  Location  Information  is  requested,  which  the  Government  is  also 
authorized  to  obtain  pursuant  to  1 8  U.S.C.  §2703(d). 

C.  Pen  Register  Information 

7.  Finally,  the  Government  seeks  an  order  pursuant  to  18  U.S.C.  §§  3121-26  authorizing 
the  use  of  a  pen  register  on  the  Target  Cellphones  for  a  period  of  60  days  from  the  date  of  this 
order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first).  Specifically,  the 
Government  seeks  an  order  directing  the  Service  Provider  to  furnish  any  information,  facilities, 


and  technical  assistance  necessary  to  operate,  unobtrusively  and  with  minimum  disruption  of 
service,  a  pen  register  and  trap  and  trace  device  to  capture  all  dialing,  routing,  addressing,  or 
signaling  information  associated  with  each  call  transmitted  to  or  from  the  Target  Cellphones,  as 
specified  further  in  the  proposed  Warrant  and  Order  (the  “Pen  Register  Information”).* * * * * 6 

8.  I  hereby  certify  pursuant  to  18  U.S.C.  §  3122  that  the  Pen  Register  Information  is 
relevant  to  an  ongoing  investigation  being  conducted  by  the  Investigating  Agency  into  suspected 
violations  of  the  Subject  Offenses  by  the  Target  Subject(s). 

! 

j 

! 


the  Sixth  Circuit’s  decision  in  United  States  v.  Carpenter,  819  F.3d  880,  887-90  (6th  Cir.  2016) 

(holding  Government’s  collection  of  business  records  containing  historical  cell  site  data  did  not 

constitute  search  under  Fourth  Amendment),  cert,  granted ,  137  S.  Ct.  2211  (June  5,  2017)  (No. 

16-402),  the  Government,  in  an  abundance  of  caution,  requests  a  warrant  under  18  U.S.C.  § 

2703(c),  upon  articulation  of  probable  cause  as  set  forth  in  the  Agent  Affidavit. 

6  The  Government  is  also  not  seeking  authorization  to  obtain  post-cut-through  dialed  digits 
(“PCTDD”),  or  digits  that  are  dialed  after  a  telephone  call  from  the  Target  Phone  has  been 
connected.  Pursuant  to  the  attached  Order,  if  possible,  the  Provider  will  forward  only  pre-cut- 
through-dialed  digits  to  the  Investigating  Agency.  However,  if  the  Provider’s  technical 
capabilities  require  it  to  forward  all  dialed  digits,  including  PCTDD,  to  the  Investigating  Agency, 
the  Investigating  Agency  will  only  decode  and  forward  to  the  agents  assigned  to  the  investigation 
the  numbers  that  are  dialed  before  the  call  is  cut  through. 
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D.  Sealing  and  Non-Disclosure  Order  to  Service  Provider 

9.  When  the  Government  obtains  records  or  information  under  §  2703(c),  it  is  notrequired 
to  notify  the  subscriber  or  customer.  18  U.S.C.  §  2703(c)(3).  Additionally,  the  Government  may 
obtain  an  order  precluding  the  Provider  from  notifying  the  subscriber  or  any  other  third-party  of 
the  warrant  or  order  obtained,  for  such  period  as  the  Court  deems  appropriate,  where  there  is  reason 
to  believe  that  such  notification  will  result  in  endangering  the  life  or  physical  safety  of  an 
individual,  flight  from  prosecution,  destruction  of  or  tampering  with  evidence,  or  intimidation  of 
potential  witnesses,  or  will  otherwise  seriously  jeopardize  the  investigation.  18  U.S.C.  §  2705(b). 

10.  Further,  18  U.S.C.  §  3123(d)  provides  that  an  order  directing  installation  of  a  pen 
register  or  trap  and  trace  device  shall  direct  the  pertinent  service  provider  “not  to  disclose  the 
existence  of  the  pen  register  or  trap  and  trace  device  or  the  existence  of  the  investigation  to  the 
listed  subscriber,  or  to  any  other  person  unless  or  until  otherwise  ordered  by  the  Court.” 

11.  Accordingly,  as  explained  further  in  the  Agent  Affidavit,  in  light  of  the  confidential 
nature  of  the  continuing  criminal  investigation  and  the  adverse  consequences  expected  in  the  event 
of  premature  notification,  the  Government  respectfully  requests  that  the  Court  direct  the  Service 
Provider  not  to  notify  the  Subscriber  or  any  other  person  of  the  Warrant  and  Order  sought  herein 
for  a  period  of  180  days,  subject  to  extension  upon  application  to  the  Court,  if  necessary. 

12.  For  similar  reasons,  I  respectfully  request  that  the  proposed  Warrant  and  Order,  this 

Application,  and  the  accompanying  Agent  Affidavit,  be  maintained  under  seal  until  the  Court 

orders  otherwise,  except  that  the  Government  be  permitted  without  further  order  of  this  Court  to 

serve  this  Warrant  and  Order  on  the  Service  Provider;  provide  copies  of  the  Warrant  and  Order  or 

the  supporting  Application  and  Agent  Affidavit  as  need  be  to  personnel  assisting  the  Government 

in  the  investigation  and  prosecution  of  this  matter;  and  disclose  these  materials  as  necessary  to 

comply  with  discovery  and  disclosure  obligations  in  any  prosecutions  related  to  this  matter. 
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III.  Prior  Requests 

14.  Except  as  may  be  set  forth  above,  no  prior  request  for  the  relief  requested  herein  has 


been  made. 

Dated:  New  York,  New  York 
April  7,  2018 


Assistant  United  States  Attorney 
Tel:  (212)  637- 
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UNITED  STATES  DISTRICT  COURT 
SOUTHERN  DISTRICT  OF  NEW  YORK 


In  re:  Warrant  and  Order  For  Prospective 
and  Historical  Location  Information  and 
Pen  Register  Information  for  the 
Cellphones  Assigned  Call  Numbers 
and 

USAO  Reference  No.  2018R00127 


AGENT  AFFIDAVIT 


18  Mag. 


Agent  Affidavit  in  Support  of  Warrant  and  Order 
for  Cellphone  Location  and  Pen  Register  Information 


STATE  OF  NEW  YORK 
COUNTY  OF  NEW  YORK 


)  ss. 
) 


Special  Agent  of  the  United  States  Attorney’s  Office  for  the  Southern 

District  of  New  York,  being  duly  sworn,  deposes  and  states: 


I.  Introduction 

1 .  I  am  a  Special  Agent  with  the  United  States  Attorney’s  Office  for  the  Southern  District 

I 

of  New  York  (“Investigating  Agency”).  As  such,  I  am  a  “federal  law  enforcement  officer”  within 

r 

1 

the  meaning  of  Federal  Rule  of  Criminal  Procedure  41(a)(2)(C),  that  is,  a  government  agent 
engaged  in  enforcing  the  criminal  laws  and  duly  authorized  by  the  Attorney  General  to  request  a 


search  warrant.  I  have  been  a  Special  Agent  with  the  USAO  since  August  2016.  I  previously 
served  as  a  Special  Agent  with  the  United  States  Department  of  Labor  Inspector  General  from 
May  201 1  to  August  2016.  In  the  course  of  my  experience  and  training  in  these  positions,  I  have 
participated  in  numerous  investigations  involving  the  use  of  cellphone  location  data. 

2.  Requested  Information.  I  respectfully  submit  this  Affidavit  pursuant  to  18  U.S.C. 


§§  2703(c)  and  (c)(1)(A)  and  the  applicable  procedures  of  Federal  Rule  of  Criminal  Procedure  41 ; 
18  U.S.C.  §§  2703(d)  &  2705;  and  18  U.S.C.  §§  3121-3126,  in  support  of  a  warrant  and  order  for 
prospective  location  information,  historical  location  information,  toll  records,  and  pen  register 
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information,  for  the  Target  Cellphones  identified  below  (collectively,  the  “Requested 
Information”). 

3.  Basis  for  Knowledge.  This  Affidavit  is  based  upon  my  participation  in  the 
investigation,  my  examination  of  reports  and  records,  and  my  conversations  with  other  law 
enforcement  agents  and  other  individuals,  as  well  as  my  training  and  experience.  Because  this 
Affidavit  is  being  submitted  for  the  limited  purpose  of  obtaining  the  Requested  Information,  it 
does  not  include  all  the  facts  that  I  have  learned  during  the  course  of  this  investigation.  Where  the 
contents  of  documents  and  the  actions,  statements,  and  conversations  of  others  are  reported  herein, 
they  are  reported  in  substance  and  in  part,  except  where  otherwise  indicated.  In  addition,  unless 
otherwise  indicated,  statements  by  others  referenced  in  this  Affidavit  were  not  necessarily  made 
to  me,  but  may  have  been  provided  to  me  by  someone  else  to  whom  I  have  spoken  or  whose  report 
I  have  read  (and  who  in  turn  may  have  had  either  direct  or  indirect  knowledge  of  the  statement). 
Similarly,  unless  otherwise  indicated,  information  in  this  Affidavit  resulting  from  surveillance 
does  not  necessarily  set  forth  my  personal  observations,  but  may  have  been  provided  to  me  by 
other  law  enforcement  agents  who  observed  the  events,  and  to  whom  I  have  spoken  or  whose 
report  I  have  read. 

4.  Target  Cellphones,  Subscriber,  Target  Subject,  and  Service  Provider.  The  Target 
Cellphones  referenced  in  this  Affidavit  are  the  cellphones  assigned  call  numbers 

and  As  further  discussed  below,  the  Target  Cellphones  are  subscribed  to  in  the 

name  of  Michael  Cohen  (the  “Subscriber”).  The  Subscriber  is  believed  to  use  the  Target 
Cellphones  and  is  a  Target  Subject  of  this  investigation.  AT&T  is  the  Service  Provider  for  the 
Target  Cellphones. 
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5.  Precision  Location  Capability.  Cellphone  service  providers  have  technical 
capabilities  that  allow  them  to  collect  at  least  two  kinds  of  information  about  the  locations  of  the 
cellphones  to  which  they  provide  seivice:  (a)  precision  location  infonnation,  also  known  as  E-91 1 
Phase  II  data,  GPS  data,  or  latitude-longitude  data,  and  (b)  cell  site  data,  also  known  as 
“tower/face”  or  “tower/sector”  infonnation.  Precision  location  information  provides  relatively 
precise  location  information  about  a  cellphone,  which  a  provider  can  typically  collect  either  via 
GPS  tracking  technology  built  into  the  phone  or  by  triangulating  the  device’s  signal  as  received 
by  the  provider’s  nearby  cell  towers.  Cell  site  data,  by  contrast,  reflects  only  the  cell  tower  and 
sector  thereof  utilized  in  routing  any  communication  to  and  from  the  cellphone,  as  well  as  the 
approximate  range  of  the  cellphone  from  the  tower  during  the  communication  (sometimes  referred 
to  as  “per-call  measurement”  (“PCM”)  or  “round-trip  time”  (“RTT”  or  “NELOS”  data).  Because 
cell  towers  are  often  a  half-mile  or  more  apart,  even  in  urban  areas,  and  can  be  ten  or  more  miles 
apart  in  rural  areas,  cell  site  data  is  typically  less  precise  than  precision  location  information.  Based 
on  my  training  and  experience,  I  know  that  the  Service  Provider  has  the  technical  ability  to  collect 
precision  location  information  from  any  cellphone  on  its  network,  including  by  initiating  a  signal 
on  the  Service  Provider’s  network  to  determine  the  phone’s  location.  I  further  know  that  cell  site 
data  is  routinely  collected  by  the  Service  Provider  in  the  course  of  routing  calls  placed  to  or  from 
any  cellphone  on  its  network.1 

6.  Successor  Service  Provider.  Because  it  is  possible  that  the  Target  Subject  may  change 
cellphone  service  provider  during  the  course  of  this  investigation,  it  is  requested  that  the  warrant 


1  Toll  records  are  sometimes  necessary  or  helpful  in  order  to  obtain  or  interpret  historical  cell  site 
data  and  are  therefore  also  requested  herein. 
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and  investigative  order  requested  apply  without  need  for  further  order  to  any  Successor  Service 
Provider  who  may  provide  service  to  the  Target  Cellphones  during  the  time  frames  at  issue  herein. 

II.  Facts  Establishing  Probable  Cause 

7.  Although  I  understand  that  probable  cause  is  not  necessary  to  obtain  all  of  the 
Requested  Information,  I  respectfully  submit  that  probable  cause  exists  to  believe  that  the 
Requested  Information  will  lead  to  evidence  of  the  crime  of  52  U.S.C.  §§  30116(a)(1)(A)  and 
30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”),  as  well  as  the  location 
of  the  Target  Subject  who  is  engaged  in  the  Subject  Offense. 

Introduction 

8.  The  USAO  and  the  Federal  Bureau  of  Investigation  (the  “FBI”)  are  investigating  a 
criminal  violation  of  the  campaign  finance  laws  by  Michael  Cohen,  a  lawyer  who  holds  himself 
out  as  the  personal  attorney  for  President  Donald  J.  Trump.  As  detailed  below,  there  is  probable 
cause  to  believe  that  Cohen  made  an  excessive  in-kind  contribution  to  the  presidential  election 
campaign  of  then-candidate  Donald  Trump  in  the  form  of  a  $130,000  payment  to  Stephanie 
Clifford,  an  individual  who  was  rumored  to  have  had  an  extramarital  affair  with  Trump,  in 
exchange  for  her  agreement  not  to  disclose  that  alleged  affair  on  the  eve  of  the  2016  presidential 
election. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of  the  Special 
Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  Chief  United 
States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails  and  other 
content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search  warrant 
for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 
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a.  On  or  about  My  1 8, 20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 


in  the  account 


@gmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 


January  1, 2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


hgmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 


“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1 , 20 1 5  and  November  1 3 , 20 1 7 
(the  “Second  Cohen  Gmail  Warrant”). 


d.  On  or  about  November  1 3, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 


'the  “Cohen  MDCPC  Account”)  sent  or  received 


emails  in  the  account 


between  the  opening  of  the  Cohen  MDCPC  Account2  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen  to  the  US  AO, 
which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  US  AO  sought  and  obtained  search  warrants  for 
emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other  accounts,  sent  or 
received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen  Gmail  Warrant” 
and  “Second  Cohen  MDCPC  Warrant”). 


2  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 
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12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails  Warrants” 
and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  fdm  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 
Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump 
Organization,  stated  to  El  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16, 2015,  Trump  formally  launched  his  2016  presidential  campaign. 
On  or  about  May  4, 20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee  for  president, 
and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review  of  public 
sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as  part  of  the 
Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of  Trump  or  his 
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campaign.  For  instance,  on  or  about  August  1 8, 20 1 6,  Cohen  appeared  on  CNN  to  defend  Trump’s 

L 

polling  numbers. 

15.  On  or  about  October  7,  2016,  The  Washington  Post  published  online  a  video  and 
accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as  “vulgar 
terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access  Hollywood.  The 
following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he  stated,  among  other 
things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this  more  than  a  decade  old 
video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t  reflect  who  I  am.  I  said 

■_ 

it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public  sources,  I  also  know  that 

i- 

representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance,  that  the  Access  Hollywood 
comment  was  an  old  and  isolated  incident. 

1 6.  Based  on  my  review  of  public  sources,  including  an  article  published  in  Slate  magazine 
by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about  October  2016, 

Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate  magazine,  among 
other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her  alleged 
relationship  with  Trump.  According  to  the  article  in  Slate ,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  201 1 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 
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17.  From  my  review  of  telephone  toll  records3  and  information  produced  pursuant  to  the 
iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days  following  the  Access 
Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and  emails  with  Keith 
Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard  of  American  Media, 
Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer ,4  Trump,  and  Hope  Hicks,  who  was  then 
press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages  and  calls — as  well  as 
all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving  Cohen — Cohen  used  one  of 


the  Target  Cellphones  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood  story,  and 
the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these  communications 
concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake  of  the  Access 
Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8,  2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.5 


3  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  obtained  from  Cohen’s  telephone 
pursuant  to  the  iCloud  Warrant. 

4  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

5  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  an  FBI  agent  who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated, 
in  substance,  that  to  the  best  of  her  recollection,  she  did  not  learn  about  the  allegations  made  by 
Clifford  until  early  November  2016.  Hicks  was  not  specifically  asked  about  this  three-way  call. 
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Based  on  the  toll  records  that  the  US  AO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 

i 

Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
about  once  a  month  prior  to  this  date  —  specifically,  prior  to  this  call  on  October  8,  2016,  Cohen 
and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in  August,  and  twice 
in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 

Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
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“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:3 1  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that  said: 
“Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you  wake, 
please  call  my  cell.” 

f.  The  following  day,  on  October  10,2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  textmessage 
that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to  be  today. 
Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on  my 
participation  in  this  investigation,  I  believe  that  when  Howard  'wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.6 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  1 0, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement 1  agreement  and  mutual 

6  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 
pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement”  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13,  2016,  and  the  days  that  followed,  Cohen  took  steps  to 
complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which  Cohen 
could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records,  information 
obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records  maintained  by  First 
Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews  with  employees  of 
First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  1 3, 20 1 6,  at  8 :54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 
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1 
| 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 

?: 

Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 

| 

of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day,  another 

I 

employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete.  Cohen 
returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy  of  his 
driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he  wanted  to 
fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 

That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between  Cohen  and 
Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client,  Clifford,  and 
they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the  presidential  election. 

Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  iCloud 
Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post ,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  17, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 


/ 
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if  Cohen  did  not  complete  the  transaction.7  According  to  the  article,  Davidson  sent  Cohen  a  second 


f 


email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her  settlement 
agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they  spoke  for 
over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told  they’re 

\ 

going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.”  Based 


on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard  that 


Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 


I 
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iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

| 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my  calls.” 

Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”  Howard 
responded  one  minute  later:  “Tire  ‘agent.’”  Based  on  my  involvement  in  this  investigation,  I 


7  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  Government  has  not 
requested  documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the 
email  referenced  in  this  article. 
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understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson  about  the 


- 


matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  andmugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. 

21 .  On  or  about  October  25,201 6,  the  communications  between  Cohen,  Davidson,  Howard 
and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving  Clifford.  Specifically, 
based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned  the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next  half 
hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about  eight 
minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 


| 


Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 

| 

Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
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email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two  minutes 
later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 
was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1:00  a.m.,  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee-1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 
questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 
minutes.  At  approximately  1 :49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an  attorney 
client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October  26, 
2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 


Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 


“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27, 20 1 6,  Cohen  made  a  payment  to  Davidson  of  $  1 30,000 — with  the  funds 
intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect  to  the 
allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my  review  of 
toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen 
Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the  transaction  with 
Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 
message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$  1 30,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s”  attorney, 

|r 

who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of  “EC, 

LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in  the 
agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 
settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy.mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Tramp;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but  it 
appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to  Kellyanne 

I 

Conway,  who  at  the  time  was  Tramp’s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4, 2016,  just  three  days  after  the  Clifford  transaction  was  completed  and 
just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an  article  alleging 

i 

: 

that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by  Playboy  model 
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Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI  had  agreed  to 
pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented  by  Davidson. 
Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen  Email  Warrants 
and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently  to  Davidson, 
Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — just  days  before  Election 
Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from  gaining  national 
traction.  Specifically,  I  have  learned  the  following: 

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent  Howard 
a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump  Organization 
lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for  comment 
from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several  times, 
including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 
really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 
minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 
responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 
At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 
want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 
position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 
investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated  “he’s 
pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal  could 
publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment  from 
AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if  necessary, 
I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars  statement. 
I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!”  Based  on 
my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above-referenced 
recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating  that  such  a 
statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but  was 
unnecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later  that 
morning,  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of  the  United 

States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that  Cohen 
arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a  government 
watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging  that  Cohen  had 
violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my  review  public 
sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  oh  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
keep  the  story  from  brealdng.  I  knew  the  allegation  to  be  false,  but  lam 
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also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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d.  On  or  about  March  9,  20 1 8,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 

\ 

from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen  used  the  Target 
Cellphones  to  commit  the  Subject  Offense.  Cohen  used  the  Target  Cellphones  to  communicate 
with  Davidson,  Howard,  Pecker,  and  others  about  the  payment  to  Clifford  on  the  eve  of  the 
election.  Indeed,  while  Cohen  denies  having  given  an  unlawful  contribution,  in  his  own  statements 
Cohen  has  admitted  that  he  paid  $  1 30,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment 
occurred  less  than  two  weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations 
about  his  behavior  toward  women,  even  though  allegations  of  an  affair  between  Trump  and 
Clifford  existed  since  2011.  In  addition,  the  communication  records  set  forth  above  make  evident 
that  Cohen  communicated — using  the  Target  Cellphones — with  members  of  the  Trump  campaign 
and  others  about  his  negotiation  with  Clifford’s  attorney  and  the  need  to  preclude  Clifford  from 
making  a  statement  that  would  have  reflected  negatively  on  the  candidate  in  advance  of  the 
forthcoming  election. 

28. 1  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned,  in  substance 
and  in  part,  that  the  Target  Cellphones  are  still  active.  Based  on  my  training  and  experience,  my 
familiarity  with  this  investigation,  and  the  information  set  forth  above,  I  therefore  believe  that  the 
Requested  Information  will  lead  to  evidence  of  the  Subject  Offense.  Specifically,  the  Requested 
Information  includes  historical  location  data  for  the  Target  Cellphones,  which  may  show  where 
the  Target  Cellphones — and  by  extension  Cohen— was  on  particular  dates  and  times  between 
October  1 ,  20 1 6 — the  approximate  time  that  negotiations  regarding  the  Clifford  payment  began — 
and  the  present.  That  location  information  can,  among  other  things,  be  used  to  corroborate  any  in- 
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person  meetings  between  the  Cohen  and  the  other  individuals  involved  in  the  negotiations  of  the 
the  payment  to  Clifford. 

29.  Based  on  my  training  and  experience,  I  also  know  that  historical  location  information 
can  be  useful  to  establish  a  pattern  of  behavior  by  a  particular  individual,  which  assists  law 
enforcement  in  tracking  such  an  individual — and,  thereby,  locating  his  electronic  devices.  Along 
with  the  historical  information,  the  prospective  information  will  also  lead  to  the  present  location 
of  the  Target  Cellphones;  law  enforcement  may  then  obtain  evidence  from  the  Target  Cellphones, 
by  subpoena  or  search  warrant,  including  but  not  limited  to  contact  lists  containing  contact 
information  for  participants  in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages 
between  these  particip  ants . 

III.  Request  for  Warrant  and  Order 

30.  Based  on  the  foregoing  I  respectfully  request  that  the  Court  require  the  Service  Provider 

to  provide  the  Requested  Information  as  specified  further  in  the  Warrant  and  Order  proposed 

herewith,  including  prospective  precision  location  and  cell  site  data  for  a  period  of  45  days  from 

the  date  of  this  Order  (or  the  date  that  the  Target  Cellphones  are  seized,  whichever  comes  first), 

historical  cell  site  data  and  toll  records  for  the  period  from  October  1,  2016  through  the-date-©£4his 

/  loi  '% 

Order,  and  pen  register  information  for  a  period  of  60  days  from  the  date  of  this  Order.  ^rdrc^t 

3 1 .  Nondisclosure.  The  existence  and  scope  of  this  ongoing  criminal  investigation  are  not 
publicly  known.  As  a  result,  premature  public  disclosure  of  this  affidavit  or  the  requested  Warrarit 
and  Order  could  alert  potential  criminal  targets  that  they  are  under  investigation,  causing  them  to 
destroy  evidence,  flee  from  prosecution,  or  otherwise  seriously  jeopardize  the  investigation. 
Accordingly,  I  respectfully  request  that  the  Provider  be  directed  not  to  notify  the  subscriber  or 
others  of  the  existence  of  the  Warrant  and  Order  for  a  period  of  1 80  days,  and  that  the  Warrant  and 
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Order  and  all  supporting  papers  be  maintained  under  seal  until  the  Court  orders  otherwise,  as 
specified  in  the  Application  submitted  in  conjunction  with  this  Affidavit. 


United  States  Attorney’s  Office 
Southern  District  of  New  York 


Sworn  to  before  me  this 
7th  dayof April,Y018.  ■ 


HONORABLE  HENRY  PITMAN 
United  States  Magistrate  Judge 
Southepo  District  of  New  York 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS  AND 


1-8  MAG  2974 

Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


L 

INTRODUCTION  AND  AGENT  BACKGROUND 

1 .  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  under 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  md  (the  “Target  Cellular 

Devices”),  which  are  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data 

3.  The  facts  in  this  affidavit  come  from  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  Tins  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause,  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 


being  first  duly  sworn,  hereby  depose  and  state  as  follows: 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  4 1  (b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 
when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  18  U.S.C.  §  3 123(b)(1). 

PROBABLE  CAUSE 
Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 

(“USAO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 

Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 

Tramp.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Tramp  in  the 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 

assigned  call  numbers  and  As  further  discussed  below,  the  Target 

Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
Subscriber  is  believed  to  use  the  Target  Cellphones  and  is  a  Target  Subject  of  this  investigation. 
AT&T  is  the  Service  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell, 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  1 8,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 

in  the  accoun  fegmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 

January  1,  2016  and  July  18,  2017  (the  “First  Cohen  Gmail  Warrant”). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

content  stored  in  the  iCloud  account  associated  with  Apple  ID  @gmail.com  (the 

“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  1 3 ,  20 1 7,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1,2015  and  November  13,2017 
(the  “Second  Cohen  Gmail  Warrant”). 
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d.  On  or  about  November  13,  2017,  tire  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  |  'the  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account1  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  USAO,  which  is  working  with  the  FBI’s  New  York  Field  Office. 

  11.  On  or  about  February  28,  201 8,  the  USAO  and  FBI  sought  and  obtained 

search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14,  2017  and  February  28,  2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).2 

12.  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails 
Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name  is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  201 1,  Life  &  Style 


1  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

2  On  or  about  February  28,  2018  and  April  7,  2018,  the  USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  11,  2011,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,  2011,  Cohen,  who  was  then  Executive  Vice-President  and  Special  Counsel  to  the  Trump, 

Organization,  stated  to  El  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 

a  sleazy  and  disgusting  website _ The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 

a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  16,  2015,  Trump  formally  launched  his  2016  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  19,  2016,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,201 6,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 2016,  The  Washington  Post  published  online  a  video 

and  accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as 

“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 

Hollywood.  The  following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he 

stated,  among  other  things,  “I’ve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  including  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning  America  show  and  Slate 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records3  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


3  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer ,4  Trump,  and  Hope 
Hicks,  who  was  then  press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

1 8.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake 
of  the  Access  Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 2016,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.5 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


4  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

5  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hicks 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes.  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,  I 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford.  At  3:3 1  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  1 0, 20 1 6,  at  1 0:5  8  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  12:25  p.m.,  Davidson  sent  Cohen  a  text 

message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  —  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.6 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  drat  on  or  about  October  1 0, 20 1 6,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “true  name  and  identity”  of  persons  named  by 


6  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 
However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 
the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the 
payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford. 
Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 
negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 
and  Pecker,  Howard,  and  Davidson. 
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pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  “side  letter  agreement  in 
order  to  facilitate  the  closing  of  a  deal  between  Davidson’s  client  and  Cohen  or  his  client  on 
October  10, 2016. 

19.  It  appears  that  on  October  13, 2016,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  a  text  message 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,  I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30,  2016.  As  noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day, 
another  employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete. 
Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  17, 2016,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appeal's  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  sources,  I  know  the  following: 

a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’ s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 20 1 6,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.7  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement  and  whether  Clifford  would  go  public.  Specifically: . .  . 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “I’m  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5 :03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?” 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


7  Due  to  the  partially  covert  nature  of  the  investigation  to  this  date,  the  US  AO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  pan.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Trump  had  an  extramarital  affair  with  Clifford.  However,  the 
article  noted  that  Clifford  had  declined  to  comment. . . . . . . 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  Email  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26,  2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9:04  a.m. — less  than  thirty  minutes  after  speaking  with  Trump — 

Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 
company  in  the  name  of  “Essential  Consultants.”  Cohen  told  First  Republic  Employee-2  that  he 

was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1 :00  a.m.,  First  Republic 
Employee-1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization — and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 
questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form — Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  this  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1 :00  a.m.  and  1 :00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 

minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 

g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,  “Can  we  speak?  Important.” 

Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  back  in  20  minutes.  1  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call .”  Howard  promptly  responded:  “David 
is  not  around  I  think.  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford — for  the  purpose  of  securing  her  ongoing  silence  with  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney’s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  coiporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  10:50  a.m..  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  infonnation  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  1 1:48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

b.  Later  that  day,  at  approximately  7:01  p.m.,  Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  201 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  infonnation  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 
“EC,  LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 
City  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 
address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyanne  Conway,  who  at  the  time  was  Tramp  ’  s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Tramp”  from  allegations  by 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days 
before  Election  Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 
gaining  national  traction.  Specifically,  I  have  learned  the  following:  

a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for 
comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hides  several 
times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’s  pissed.”  Howard  wrote  back, 
“I’m  pissed!  You’re  pissed.  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do,”  Based 

on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5,  2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  pom  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was  umiecessary  at  that  time.  Based  on  a  text  message  from  Hicks  to  Cohen,  I  believe  that  later 

that  morning,  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’s  what  you  do  for  family. 

(Emphasis  added.)  Based  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 

is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  (“...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  2018,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Tramp  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14,  2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  die  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 


directly  or  indirectly.” 
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d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my  home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  form  of  a  $130,000  payment  to  Clifford  on  the  election.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid  $130.000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred  less  than  two 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
in  substance  and  in  part,  that  the  Target  Cellular  Devices  are  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANNER  OF  EXECUTION 

29.  In  my  framing  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastructure,  including 

towers  that  route  and  connect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular  and  wifi  signals  include  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  warrant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Target  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 

Devices _ Such  a  device  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 
cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 
be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 
In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 
wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 
devices’  unique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  detennined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  infonnation  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  make  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 
Target  Cellular  Devices  from  all  other  cellular  devices.  

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  a  pen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  necessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 
See  18  U.S.C.  §  3103a(b)(2). 
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34.  I  further  request  that  the  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 


daytime  hours. 


35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 


application,  including  the  affidavit  and  search  warrant,  be  sealed  until  further  order  of  the  Court. 

These  documents  discuss  an  ongoing  criminal  investigation  that  is  neither  public  nor  known  to  all 

of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents^ _ _ 

because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 


abundance  of  caution. 


Respectfully  submitted, 


Federal  Bureau  of  Investigation 


Subscribed  and  sworn  to  before  me  J^y  775  ^  ph(/f 


I 


) , 


!  . 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE  Case 
CELLULAR  DEVICES  ASSIGNED  CALL 


•1 8 MAG  2 974 


NUMBERS 


AND 


Filed  Under  Seal 


WARRANT  AND  ORDER  OF  AUTHORIZATION 


TO:  Special  Agents  of  the  Federal  Bureau  of  Investigation  and  Other  Authorized 

Personnel 

I.  Findings 

The  Court  hereby  finds: 


of  the  Federal  Bureau  of 


1.  Upon  an  affidavit  of  Special  Agent 


Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 


the  (“Target  Cellular  Devices”),  which  are  described  in 


Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 


register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 


Case  l:18-cr-00602-WHP  Document  48-8  Filed  07/18/19  Page  28  of  62 


Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Grim.  P.  41,  18  U.S.C.  §§  3121  et  seq.,  and  18 
U.S.C.  §  3103a,  IT  IS  HEREBY  ORDERED: 

II.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
officials  are  hereby  authorized  to  employ  an  electronic  investigative  technique,  which  is  described 

in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(f)(3),  the  Court  authorizes  the  officer  executing  the  warrant  to  delay  in  notice  until 
30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified  because 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 
3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
seaM  until  further  order  of  the  Court,  except  that  the  Government  may  without  further  order  of 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


LlzJLi  LA 


Of , ' ,f  4' 


Date  Issued 


Time  Issued 


UNITED  STATES  MAGISTRATE  JUDGE 
Southern  District  of  New  York' 
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ATTACHMENT  A 

This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 

whose  wireless  provider  is  AT&T,  and  whose  listed  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  for  the  puipose  of 
communicating  with  cellular  infrastructure,  including  towers  that  route  and  connect 
individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  during  all  times  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 

SITE  SIMULATOR  TO  LOCATE  THE  Case  No. 

CELLULAR  DEVICES  ASSIGNED  CALL 

NUMBERS  AND  Filed  Under  Seal 


AFFIDAVIT  IN  SUPPORT  OF 
AN  APPLICATION  FOR  A  SEARCH  WARRANT 


being  first  duly  sworn,  hereby  depose  and  state  as  follows: 


INTRODUCTION  AND  AGENT  BACKGROUND 


1 .  I  make  this  affidavit  in  support  of  an  application  for  a  search  warrant  under 

Federal  Rule  of  Criminal  Procedure  41  to  authorize  law  enforcement  to  employ  an  electronic 
investigative  technique,  which  is  described  in  Attachment  B,  to  determine  the  location  of  the 
cellular  devices  assigned  call  numbers  (the  “Target  Cellular 

Devices”),  which  are  described  in  Attachment  A. 

2.  I  am  a  Special  Agent  with  the  Federal  Bureau  of  Investigation  (“FBI”).  I 
have  been  a  Special  Agent  with  the  FBI  since  2009.  In  the  course  of  my  experience  and  training 
in  these  positions,  I  have  participated  in  criminal  investigations  into  federal  offenses  involving  a 
wide  array  of  financial  crimes,  including  offenses  involving  public  corruption.  I  also  have 
training  and  experience  executing  warrants  for  cellphone  location  data. 

3.  The  facts  in  this  affidavit  come  from  my  personal  observations,  my  training  and 
experience,  and  information  obtained  from  other  agents  and  witnesses.  This  affidavit  is  intended 
to  show  merely  that  there  is  sufficient  probable  cause  for  the  requested  warrant  and  does  not  set 
forth  all  of  my  knowledge  about  this  matter. 
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4.  One  purpose  of  applying  for  this  warrant  is  to  determine  with  precision  the  Target 
Cellular  Devices’  location.  However,  there  is  reason  to  believe  the  Target  Cellular  Devices  are 
currently  located  somewhere  within  this  district  because  the  Target  Cellular  Devices’  owner  is 
known  to  spend  most  of  his  time  in  this  district.  Pursuant  to  Rule  41(b)(2),  law  enforcement  may 
locate  the  Target  Cellular  Devices  outside  the  district  provided  the  device  is  within  the  district 

.  when  the  warrant  is  issued. 

5.  Based  on  the  facts  set  forth  in  this  affidavit,  there  is  probable  cause  to  believe  that 
violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions) 
(the  “Subject  Offense”)  has  been  committed,  are  being  committed,  and  will  be  committed  by 
Michael  Cohen  and  others.  There  is  also  probable  cause  to  believe  that  the  location  of  the  Target 
Cellular  Devices  will  lead  to  evidence  of  the  Subject  Offense,  as  detailed  below. 

6.  Because  collecting  the  information  authorized  by  this  warrant  may  fall  within  the 
statutory  definitions  of  a  “pen  register”  or  a  “trap  and  trace  device,”  see  18  U.S.C.  §  3127(3)  & 
(4),  this  warrant  is  designed  to  comply  with  the  Pen  Register  Statute  as  well  as  Rule  41.  See  18 
U.S.C.  §§  3 121-3127.  This  warrant  therefore  includes  all  the  information  required  to  be  included 
in  a  pen  register  order.  See  18  U.S.C.  §  3123(b)(1). 

PROBABLE  CAUSE 

Introduction 

7.  The  United  States  Attorney’s  Office  for  the  Southern  District  of  New  York 
(“US AO”)  and  the  FBI  are  investigating  a  criminal  violation  of  the  campaign  finance  laws  by 
Michael  Cohen,  a  lawyer  who  holds  himself  out  as  the  personal  attorney  for  President  Donald  J. 
Trump.  As  detailed  below,  there  is  probable  cause  to  believe  that  Cohen  made  an  excessive  in- 

kind  contribution  to  the  presidential  election  campaign  of  then-candidate  Donald  Trump  in  the 
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form  of  a  $130,000  payment  to  Stephanie  Clifford,  an  individual  who  is  alleged  to  have  had  an 
extramarital  affair  with  Trump,  in  exchange  for  her  agreement  not  to  disclose  that  alleged  affair 
on  the  eve  of  the  2016  presidential  election. 

8.  The  Target  Cellular  Devices  referenced  in  this  Affidavit  are  the  cellphones 


assigned  call  numbers 


As  further  discussed  below,  the  Target 


Cellular  Devices  are  subscribed  to  in  the  name  of  Michael  Cohen  (the  “Subscriber”).  The 
Subscriber  is  bclieved  to  use  the  Target  Cellphones  and  is  a"  Target  Subject  of  this  investigation. 


AT&T  is  the  Service  Provider  for  the  Target  Cellphones. 

Prior  Relevant  Process 

9.  In  connection  with  an  investigation  then  being  conducted  by  the  Office  of 
the  Special  Counsel  (“SCO”),  the  FBI  sought  and  obtained  from  the  Honorable  Beryl  A.  Howell,  • 
Chief  United  States  District  Judge  for  the  District  of  Columbia,  three  search  warrants  for  emails 
and  other  content  information  associated  with  two  email  accounts  used  by  Cohen,  and  one  search 
warrant  for  stored  content  associated  with  an  iCloud  account  used  by  Cohen.  Specifically: 

a.  On  or  about  July  18, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for  emails 
ojgmail.com  (the  “Cohen  Gmail  Account”)  sent  or  received  between 

January  1, 2016  and  July  1 8, 2017  (the  “First  Cohen  Gmail  Wan-anf ’). 

b.  On  or  about  August  8,  2017,  the  FBI  sought  and  obtained  a  search  warrant  for 

ajgmail.com  (the 


content  stored  in  the  iCloud  account  associated  with  Apple  ID 
“Cohen  iCloud  Account”  and  the  “Cohen  iCloud  Warrant”). 

c.  On  or  about  November  13, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  Cohen  Gmail  Account  sent  or  received  between  June  1, 2015  andNovember  13, 2017 
(the  “Second  Cohen  Gmail  Warrant”). 


in  the  account 
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d.  On  or  about  November  13, 2017,  the  FBI  sought  and  obtained  a  search  warrant  for 
emails  in  the  account  |  'the  “Cohen  MDCPC  Account”)  sent  or  received 

between  the  opening  of  the  Cohen  MDCPC  Account1  and  November  13,  2017  (the  “First  Cohen 
MDCPC  Warrant”). 

10.  The  SCO  has  since  referred  certain  aspects  of  its  investigation  into  Cohen 
to  the  US  AO,  which  is  working  with  the  FBI’s  New  York  Field  Office. 

11.  On  or  about  February  28,  2018,  the  USAO  and  FBI  sought  and  obtained 
search  warrants  for  emails  in  Cohen  Gmail  Account  and  Cohen  MDCPC  Account,  among  other 
accounts,  sent  or  received  between  November  14, 2017  and  February  28, 2018  (the  “Third  Cohen 
Gmail  Warrant”  and  “Second  Cohen  MDCPC  Warrant”).2 

12. '  The  above-described  warrants  are  referred  to  herein  as  the  “Cohen  Emails 

Warrants”  and,  with  respect  to  the  iCloud  Warrant,  the  “Cohen  iCloud  Warrant.” 

The  Illegal  Campaign  Contribution  Scheme 

13.  From  my  review  of  public  sources,  I  have  learned  the  following: 

a.  In  or  around  October  2011,  there  were  rumors  published  on  the  gossip  website 
TheDirty.com  that  Trump  had  had  an  extramarital  affair  with  Clifford,  an  adult  film  actress  whose 
screen  name. is  Stormy  Daniels,  in  or  around  July  2006.  In  or  about  October  2011,  Life  &  Style 


1  Based  on  my  review  of  this  warrant  and  the  affidavit  in  support  of  it,  I  know  that  the  warrant  did 
not  specify  a  time  period,  but  the  affidavit  indicated  that,  pursuant  to  court  order,  the  service 
provider  had  provided  non-content  information  for  the  Cohen  MDCPC  Account  that  indicated  that 
the  account  contained  emails  from  the  approximate  period  of  March  2017  through  the  date  of  the 
warrant. 

2  On  or  about  February  28,  2018  and  April  7,  2018,  the.USAO  and  FBI  sought  and  obtained  Rule 
41  search  warrants  authorizing  the  search  of  emails  and  content  obtained  pursuant  to  previously 
issued  warrants  for  additional  subject  offenses. 
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Magazine,  a  tabloid  sold  in  supermarkets,  also  published  an  article,  based  on  the  report  in 
TheDirty.com,  alleging  an  affair  had  occurred  between  Trump  and  Clifford.  Both  Trump  and 
Clifford,  through  their  representatives,  issued  denials  in  response  to  the  articles. 

b.  Specifically,  on  or  about  October  1 1 , 20 1 1 ,  Keith  Davidson,  who  identified  himself 
as  Clifford’s  attorney,  sent  a  cease  and  desist  letter  to  TheDirty.com,  demanding  that  the  article 
regarding  Trump  and  Clifford  be  removed  from  the  website.  Additionally,  on  or  about  October 
12,— 201 1,  Cohen^  -who  was  then  Executive -Vice-President  and  Special  Counsel-  to  the  'frump 
Organization,  stated  to  El  News  that  “[t]he  totally  untrue  and  ridiculous  story  . . .  emanated  from 
a  sleazy  and  disgusting  website. . . .  The  Trump  Organization  and  Donald  J.  Trump  will  be  bringing 
a  lawsuit .  .  .  [and]  Mr.  Trump  and  the  Trump  Organization  would  like  to  thank  and  commend 
Stormy  Daniels  and  her  attorneys  for  their  honesty  and  swift  actions.” 

14.  On  or  about  June  1 6,  20 1 5,  Trump  formally  launched  his  20 1 6  presidential 
campaign.  On  or  about  May  4,  20 1 6,  Trump  became  the  presumptive  Republican  Party  nominee 
for  president,  and  on  July  1 9,  20 1 6,  Trump  officially  became  the  nominee.  Based  on  my  review 
of  public  sources,  I  have  learned  that  while  it  does  not  appear  that  Cohen  had  an  official  title  as 
part  of  the  Trump  campaign,  on  multiple  occasions  Cohen  made  public  statements  on  behalf  of 
Trump  or  his  campaign.  For  instance,  on  or  about  August  18,2016,  Cohen  appeared  on  CNN  to 
defend  Trump’s  polling  numbers. 

15.  On  or  about  October  7, 20 1 6,  The  Washington  Post  published  online  a  video 
and  accompanying  audio  in  which  Trump  referred  to  women  in  what  the  article  described  as 
“vulgar  terms”  in  a  2005  conversation  with  Billy  Bush,  who  was  then  the  host  of  Access 
Hollywood.  The  following  day,  on  October  8,  2016,  Trump  appeared  in  a  video  in  which  he 
stated,  among  other  things,  “Fve  said  and  done  things  I  regret  and  words  released  today  on  this 
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more  than  a  decade  old  video  are  one  of  them.  Anyone  who  knows  me  knows  these  words  don’t 
reflect  who  I  am.  I  said  it.  I  was  wrong  and  I  apologize.”  Based  on  my  review  of  public 
sources,  I  also  know  that  representatives  of  the  Trump  Campaign  stated,  in  sum  and  substance, 
that  the  Access  Hollywood  comment  was  an  old  and  isolated  incident. 

16.  Based  on  my  review  of  public  sources,  including  an  article  published  in 
Slate  magazine  by  a  reporter  who  interviewed  Clifford,  that  around  this  same  time,  in  or  about 
October  2016,  Clifford  was  in  discussions  with  ABC’s  Good  Morning^America  show  and  Slate 
magazine,  among  other  media  sources,  to  provide  these  media  outlets  with  her  statement  about  her 
alleged  relationship  with  Trump.  According  to  the  article  in  Slate,  which  the  author  based  on 
conversations  with  Clifford  over  the  telephone  and  by  text  message,  Clifford  wanted  to  be  paid  for 
her  story  or  be  paid  by  Trump  not  to  disclose  her  accusation.  As  Cohen  summarized  in  a  2018 
email  obtained  pursuant  to  the  Cohen  Email  Warrants:  “In  October  2016,  I  was  contacted  by 
counsel  for  Ms.  Clifford  stating  that  news  outlets,  including  ABC  News ,  were  pursuing  the  2011 
story  of  an  alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.” 

17.  From  my  review  of  telephone  toll  records3  and  information  produced 
pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  I  have  learned  that  in  the  days 
following  the  Access  Hollywood  video,  Cohen  exchanged  a  series  of  calls,  text  messages,  and 
emails  with  Keith  Davidson,  who  was  then  Clifford’s  attorney,  David  Pecker  and  Dylan  Howard 


3  My  attribution  of  certain  telephone  numbers  to  certain  individuals  as  described  in  this 
affidavit  is  based  on  my  review  of  the  vCard  (virtual  contact  file)  and  text  messages  obtained  from 
Cohen’s  telephone  pursuant  to  the  iCloud  Warrant. 
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of  American  Media,  Inc.  (“AMI”),  the  publisher  of  the  National  Enquirer  ,A  Trump,  and  Hope 
Hicks,  who  was  then  press  secretary  for  Trump’s  presidential  campaign.  For  these  text  messages 
and  calls — as  well  as  all  of  the  text  messages  and  calls  referenced  in  this  affidavit  involving 
Cohen — Cohen  used  one  of  the  Target  Cellular  Devices  for  the  communication. 

18.  Based  on  the  timing  of  the  calls  in  the  days  following  the  Access  Hollywood 
story,  and  the  content  of  the  text  messages  and  emails,  I  believe  that  at  least  some  of  these 
communications  concerned  the  need  to  prevent  Clifford  from  going  public,  particularly  in  the  wake 
of  the  Access  Hollywood  story.  In  particular,  I  have  learned  the  following: 

a.  On  October  8, 20 1 6,  at  approximately  7:20  p.m.,  Cohen  received  a  call  from  Hicks. 
Sixteen  seconds  into  the  call,  Trump  joined  the  call,  and  the  call  continued  for  over  four  minutes.4 5 
Based  on  the  toll  records  that  the  USAO  has  obtained  to  date,  I  believe  that  this  was  the  first  call 
Cohen  had  received  or  made  to  Hicks  in  at  least  multiple  weeks,  and  that  Cohen  and  Trump  spoke 
on  the  telephone  about  once  a  month  prior  to  this  date  -  specifically,  prior  to  this  call  on  October 


4  Pecker  is  President  of  AMI  and,  according  to  his  own  statements  in  public  reports,  a  personal 
friend  of  Trump.  Howard  is  the  chief  content  officer  of  AMI,  who  according  to  public  records 
reports  directly  to  Pecker. 

5  I  believe  that  Trump  joined  the  call  between  Cohen  and  Hicks  based  on  my  review  of  toll 
records.  Specifically,  I  know  that  a  call  was  initiated  between  Cohen’s  telephone  number  and 
Trump’s  telephone  number  at  the  same  time  the  records  indicate  that  Cohen  was  talking  to  Hicks. 
After  the  Cohen-Trump  call  was  initiated,  it  lasted  the  same  period  of  time  as  the  Cohen-Hiclcs 
call.  Additionally,  the  toll  records  indicate  a  “-1”  and  then  Trump’s  telephone  number,  which, 
based  on  my  training  and  experience,  means  that  the  call  was  either  transferred  to  Trump,  or  that 
Trump  was  added  to  the  call  as  a  conference  or  three-way  call  participant.  In  addition,  based  on 
my  conversations  with  another  law  enforcement  agent  who  has  spoken  to  a  law  enforcement  agent 
who  has  interviewed  Hicks,  I  have  learned  that  Hicks  stated,  in  substance,  to  the  best  of  her 
recollection,  she  did  not  learn  about  the  allegations  made  by  Clifford  until  early  November  2016. 
Hicks  was  not  specifically  asked  about  this  three-way  call. 
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8,  2016,  Cohen  and  Trump  had  spoken  once  in  May,  once  in  June,  once  in  July,  zero  times  in 
August,  and  twice  in  September. 

b.  Approximately  ten  minutes  after  the  call  ended,  Hicks  and  Cohen  spoke  again  for 
about  two  minutes. 

c.  At  7:39  p.m.,  immediately  after  the  second  call  with  Hicks  ended,  Cohen  called 
David  Pecker  (as  noted  above,  the  President  of  American  Media  Inc.,  or  AMI)  and  they  connected 
for  thirty  seconds.  Approximately  four  minutes  later,  Cohen  called  Pecker  again  and  they  spoke 
for  more  than  a  minute.  Three  minutes  after  ending  his  call  with  Pecker,  Cohen  received  a  call 
from  Dylan  Howard  (as  noted  above,  the  Chief  Content  Officer  of  AMI),  and  they  spoke  for 
approximately  a  minute.  According  to  toll  records,  it  does  not  appear  that  Cohen  and  Howard 
spoke  regularly  prior  to  October  8,  2016,  as  it  had  been  over  a  month  since  they  had  called  each 
other. 

d.  At  7:56  p.m.,  approximately  eight  minutes  after  his  call  with  Howard  ended,  Cohen 
called  Hicks  and  they  connected  for  two  minutes .  At  approximately  the  same  time  this  call  ended, 
Cohen  received  a  call  from  Pecker,  and  they  spoke  for  about  two  minutes.  At  8:03  p.m.,  about 
three  minutes  after  ending  his  call  with  Pecker,  Cohen  called  Trump,  and  they  spoke  for  nearly 
eight  minutes. 

e.  At  8:39  p.m.  and  8:57  p.m.,  Cohen  received  calls  from  Howard  and  spoke  to  him 
for  about  four  and  six  minutes,  respectively.  At  9:13  p.m.,  about  ten  minutes  after  Cohen  and 
Howard  hung  up  from  the  second  of  these  calls,  Howard  sent  Cohen  a  text  message  that  said: 
“Keith  will  do  it.  Let’s  reconvene  tomorrow.”  Based  on  my  involvement  in  this  investigation,! 
believe  that  when  Howard  wrote  “Keith,”  he  was  referring  to  Keith  Davidson,  the  attorney  for 
Stephanie  Clifford. .  At  3:3 1  a.m.,  now  on  October  9,  2016,  Cohen  sent  Howard  a  text  message  in 
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response  that  said:  “Thank  you.”  Eight  minutes  later,  Cohen  sent  Howard  a  text  message  that 
said:  “Resolution  Consultants  LLC.  is  the  name  of  the  entity  I  formed  a  week  ago.  Whenever  you 
wake,  please  call  my  cell.” 

f.  The  following  day,  on  October  10, 2016,  at  10:58  a.m.,  Howard  sent  a  text  message 
to  Cohen  and  Davidson,  which  stated:  “Keith/Michael:  connecting  you  both  in  regards  to  that 
business  opportunity.  Spoke  to  the  client  this  AM  and  they’re  confirmed  to  proceed  with  the 
opportunity.  Thanks.  Dylan.  Over  to  you  two.”  At  1 2:25  p.m.,  Davidson  sent  Cohen  a  text 


message  that  stated:  “Michael  -  if  we  are  ever  going  to  close  this  deal  -  In  my  opinion,  it  needs  to 
be  today.  Keith.”  Davidson  and  Cohen  then  spoke  by  phone  for  about  three  minutes.  Based  on 
my  participation  in  this  investigation,  I  believe  that  when  Howard  wrote  that  the  “client”  was 
“confirmed  to  proceed  with  the  opportunity,”  he  was  referring  to  Clifford’s  agreement  in  principle 
to  accept  money  from  Cohen  in  exchange  for  her  agreement  not  to  discuss  any  prior  affair  with 
then-candidate  Trump.6 

g.  Based  on  my  review  of  records  obtained  pursuant  to  the  Cohen  Email  Warrants,  I 
know  that  on  or  about  October  10, 2016,  Clifford  and  Davidson  appear  to  have  signed  a  “side  letter 
agreement”  that  stated  it  was  an  exhibit  to  a  “confidential  settlement  agreement  and  mutual 
release”  between  “Peggy  Peterson”  and  “David  Dennison.”  The  purpose  of  the  document, 
according  to  the  agreement,  was  to  define  the  “hue  name  and  identity”  of  persons  named  by 


6  As  set  forth  below,  AMI  was  also  involved  in  a  payment  to  model  Karen  McDougal. 

However,  because  these  communications  were  in  close  temporal  proximity  to  the  events  involving 

the  negotiation  of  a  payment  to  Clifford,  the  execution  of  the  agreement  with  Clifford,  and  the  j; 

payment  of  money  to  Clifford,  I  believe  that  these  communications  were  related  to  Clifford.  [ 

Additionally,  based  on  my  review  of  public  statements  by  McDougal,  I  have  learned  that  she 

negotiated  an  agreement  with  AMI  several  months  prior  to  these  communications  between  Cohen 

and  Pecker,  Howard,  and  Davidson. 
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pseudonym  in  “confidential  settlement  agreement  and  mutual  release.”  The  side  letter  agreement 
specifies  the  identity  of  “Peggy  Peterson”  to  be  Clifford,  but  the  space  for  “Dennison’s”  identity 
is  blank.  The  agreement  also  includes  a  signature  page  for  “Peterson,”  “Dennison,”  and  their 
attorneys.  The  signature  page  is  signed  by  “Peterson”  and  his  attorney,  Davidson,  but  the 
document  is  unsigned  by  “Dennison”  and  his  attorney.  Based  on  my  involvement  in  this 
investigation,  I  believe  that  Davidson  sent  Cohen  this  partially-signed  side  letter  agreement  in 
order  to  facilitate  the  closing- of  a  dealbetween-Davidson  s  client,  and.  Cohen  or  his  client  on 
October  10,  2016. 

19.  It  appears  that  on  October  1 3 , 20 1 6,  and  the  days  that  followed,  Cohen  took 
steps  to  complete  a  transaction  with  Davidson,  including  attempting  to  open  an  account  from  which 
Cohen  could  transfer  funds  to  Davidson.  Specifically,  from  my  review  of  toll  records, 
information  obtained  pursuant  to  the  iCloud  Warrant  and  Cohen  Email  Warrants,  records 
maintained  by  First  Republic  Bank  (“First  Republic”),  as  well  as  my  participation  in  interviews 
with  employees  of  First  Republic,  I  have  learned  the  following: 

a.  On  the  morning  of  October  13, 2016,  at  8:54  a.m.,  Cohen  sent  Pecker  atextmessage 
that  stated:  “I  need  to  talk  to  you.”  At  9:06  a.m.,  Pecker  sent  a  text  message  to  Cohen  that  stated, 
“I  called  please  call  me  back.”  The  tolls  between  Cohen  and  Pecker  do  not  show  a  telephone  call 
between  8:54  a.m.  and  9:06  a.m.  However,  based  on  my  review  of  text  messages,.I  have  learned 
that  Cohen  and  Pecker  communicate  with  each  other  over  Signal,  which  is  an  encrypted 
communications  cellphone  application  that  allows  users  to  send  encrypted  text  messages  and  make 
encrypted  calls. 

b.  At  9:23  a.m.,  Cohen  sent  an  email  that  stated  “call  me”  to  a  banker  at  First  Republic 
Bank  (“First  Republic  Employee-2”).  The  email  attached  documents  from  the  Secretary  of  State 
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of  Delaware  indicating  that  Cohen  had  formed  a  limited  liability  company  called  “Resolution 
Consultants  LLC”  on  September  30, 20 1 6.  As.noted  above,  “Resolution  Consultants”  is  the  name 
of  the  entity  that  Cohen  had  told  Howard  he  had  formed  recently  after  Howard  said  Davidson 
would  “do  it.”  At  10:44  a.m.,  Cohen  called  First  Republic  Employee-2  and  told  him,  in  sum  and 
substance,  that  he  needed  an  account  in  the  name  of  “Resolution  Consultants”  opened  immediately, 
and  that  he  did  not  want  an  address  on  the  checks  written  out  of  the  account.  Later  that  day, 
another  employee  at  First  Republic  emailed  Cohen  account  opening  paperwork  to  complete. 


Cohen  returned  the  account  opening  documents  partially  completed,  but  failed  to  provide  a  copy 
of  his  driver’s  license  or  passport,  and  did  not  respond  to  the  employee’s  question  of  how  he 
wanted  to  fund  the  account.  As  a  result,  the  account  was  never  opened. 

c.  On  October  1 7, 20 1 6,  Cohen  incorporated  Essential  Consultants  LLC  in  Delaware. 
That  same  day,  he  filed  paperwork  to  dissolve  Resolution  Consultants  LLC. 

20.  Despite  these  steps  taken  by  Cohen,  it  appears  that  the  negotiation  between 
Cohen  and  Davidson  was  not  progressing  sufficiently  fast  enough  for  Davidson  or  his  client, 
Clifford,  and  they  threatened  to  go  public  with  Clifford’s  allegations  just  days  before  the 
presidential  election.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  and  public  sources,  I  know  the  following: 

•  a.  According  to  an  article  in  The  Washington  Post,  which  quoted  emails  sent  from 
Cohen’s  email  account  hosted  by  the  Trump  Organization,  on  October  1 7, 2016,  Davidson  emailed 
Cohen  and  threatened  to  cancel  the  aforementioned  “settlement  agreement”  by  the  end  of  the  day 
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if  Cohen  did  not  complete  the  transaction.7  According  to  the  article,  Davidson  sent  Cohen  a 
second  email  later  in  the  day  that  stated  in  part,  “Please  be  advised  that  my  client  deems  her 
settlement  agreement  canceled  and  void.”  At  4:00  p.m.  that  day,  Cohen  called  Davidson  and  they 
spoke  for  over  five  minutes. 

b.  Cohen’s  4:00  p.m.  call  with  Davidson  and/or  Davidson’s  threats  to  cancel  the 
“settlement  agreement”  appear  to  have  touched  off  a  flurry  of  communications  about  the  settlement 
agreement,  and  whether  Clifford  would  go  public.  Specifically:  _ _ 

i.  At  4:43  p.m.,  Howard  sent  Cohen  a  text  message  that  stated:  “Pm  told 
they’re  going  with  DailyMail.  Are  you  aware?”  One  minute  later,  Cohen  responded:  “Call  me.” 
Based  on  my  involvement  in  this  investigation,  I  understand  Howard’s  text  to  mean  that  he  heard 
that  Clifford  was  going  to  take  her  story  of  an  extramarital  affair  with  Trump  to  the  Daily  Mail,  a 
tabloid  newspaper. 

ii.  At  4:45  p.m.,  Howard  called  Cohen  and  they  spoke  for  over  two  minutes. 
Moments  later,  Davidson  and  Cohen  spoke  for  about  two  minutes. 

iii.  At  5:03  p.m.,  Cohen  attempted  to  call  Trump,  but  the  call  only  lasted  eight 
seconds.  This  was  Cohen’s  first  call  after  he  spoke  with  Davidson. 

iv.  At  5:25  p.m.,  Cohen  texted  Howard,  stating:  “Well???” 

v.  At  6:44  p.m.,  Howard  responded  to  Cohen’s  text,  stating:  “Not  taking  my 
calls.”  Cohen  responded  one  minute  later:  “You’re  kidding.  Who  are  you  trying  to  reach?”, 
Howard  responded  one  minute  later:  “The  ‘agent.’”  Based  on  my  involvement  in  this 


7  Due  to  the  partially  covert  nature  of  the  investigation  to  this,  date,  the  USAO  has  not  requested 
documents  from  the  Trump  Organization  or  Davidson,  and  thus  does  not  possess  the  email 
referenced  in  this  article. 
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investigation,  I  understand  Howard’s  text  messages  to  mean  that  he  attempted  to  contact  Davidson 
about  the  matter  involving  Clifford,  but  that  Davidson  was  not  taking  Howard’s  calls. 

vi.  At  6:49  p.m.,  Cohen  called  Howard  and  they  spoke  for  nearly  four  minutes. 

c.  The  following  day,  on  October  18,  2016,  TheSmokingGun.com,  a  website  that 
publishes  legal  documents  and  mugshots,  published  an  article  called:  “Donald  Trump  and  the  Pom 
Superstar,”  which  alleged  that  Tramp  had  an  extramarital  affair  with  Clifford.  However,  the 

article  noted  that  Clifford  had  declined  to  comment - - -  - 

21.  On  or  about  October  25,  2016,  the  communications  between  Cohen, 
Davidson,  Howard  and  Pecker  picked  up  again,  apparently  concerning  a  transaction  involving 
Clifford.  Specifically,  based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the 
Cohen  F.mail  Warrants  and  iCloud  Warrant,  as  well  as  my  review  of  public  sources,  I  have  learned 
the  following: 

a.  On  October  25,  2016,  at  6:09  p.m.,  Howard  sent  Cohen  a  text  message  stating: 
“Keith  calling  you  urgently.  We  have  to  coordinate  something  on  the  matter  he’s  calling  you  about 
or  its  [sic]  could  look  awfully  bad  for  everyone.”  One  minute  later,  Davidson  sent  Cohen  a  text 
message  stating  “Call  me.”  Cohen  and  Davidson  called  each  other  several  times  over  the  next 
half  hour  but  appear  not  to  have  connected.  At  6:42  p.m.,  Cohen  and  Davidson  spoke  for  about 
eight  minutes.  At  7:1 1  p.m.,  they  spoke  for  another  two  minutes. 

b.  The  next  morning,  on  or  about  October  26, 2016,  at  8:26  a.m.,  Cohen  called  Trump 
and  spoke  to  him  for  approximately  three  minutes.  At  8:34  a.m.,  Cohen  called  Trump  again  and 
connected  for  a  minute  and  a  half. 

c.  At  approximately  9 : 04  a.m.— less  than  thirty  minutes  after  speaking  with  Trump — 
Cohen  sent  two  emails  to  the  person  who  had  incorporated  Resolution  Consultants  and  Essential 
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Consultants  for  him,  and  stated  “can  you  send  me  asap  the  filing  receipt”  and  then,  in  the  second 
email,  “for  Essential  Consultants  LLC.”  That  person  responded  with  the  filing  receipt  two 
minutes  later  at  9:06  a.m.  and  with  the  certification  of  formation  23  minutes  later,  at  9:27  a.m. 

d.  Shortly  after  that,  Cohen  contacted  a  particular  employee  at  First  Republic  (“First 
Republic  Employee-2”)  and  told  him,  in  sum  and  substance,  that  he  decided  not  to  open  an  account 
in  the  name  of  “Resolution  Consulting”  and  instead  would  be  opening  a  real  estate  consulting 

company  in  the  name  of  “Essential  C onsultants . ’ ’ _ Cohen  fold  First  Republic  Employee-2  that  he 

was  at  Trump  Tower,  and  wanted  to  go  to  a  First  Republic  branch  across  the  street  to  open  the 
account,  so  First  Republic  Employee-2  called  another  employee  of  First  Republic  (“First  Republic 
Employee-1  ”),  a  preferred  banker  at  that  branch,  to  assist  Cohen.  At  1 1 :00  a.m.,  First  Republic 
Employee- 1  called  Cohen.  I  know  from  my  participation  in  an  interview  with  First  Republic 
Employee- 1,  that  around  the  time  of  the  call  he  went  to  Cohen’s  office  in  Trump  Tower — on  the 
same  floor  as  the  Trump  Organization— and  went  through  account  opening  questions,  including 
know  your  customer  questions,  with  Cohen.  In  response  to  a  series  of  know-your-customer 

i 

questions  about  the  purpose  of  the  account — the  answers  to  which  First  Republic  Employee-1 
entered  into  a  form— Cohen  stated,  in  sum  and  substance,  that  he  was  opening  Essential 
Consultants  as  a  real  estate  consulting  company  to  collect  fees  for  investment  consulting  work, 
and  all  of  his  consulting  clients  would  be  domestic  individuals  based  in  the  United  States.  Based 
on  my  review  of  records  obtained  from  First  Republic,  it  appears  that  tins  account  (the  “Essential 
Consultants  Account”)  was  created  at  a  time  between  1 1:00  a.m.  and  1:00  p.m. 

e.  At  1:47  p.m.,  Cohen  called  Davidson  and  they  spoke  for  approximately  two 

minutes.  At  approximately  1:49  p.m.,  Davidson  emailed  Cohen  wiring  instructions  for  an 

attorney  client  trust  account  at  City  National  Bank. 
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f.  After  the  Essential  Consultants  Account  was  opened  on  October  26,  2016,  Cohen 
transferred  $131,000  from  a  home  equity  line  of  credit  that  Cohen  had  at  First  Republic  to  the 
Essential  Consultants  Account.  Following  the  transfer,  at  approximately  4:15  p.m.  on  October 
26,  2016,  First  Republic  Employee-2’s  assistant  emailed  Cohen  at  his  Trump  Organization  email 
address  to  tell  him  that  the  funds  had  been  deposited  into  the  Essential  Consultants  Account. 
Cohen  forwarded  that  email  to  the  Cohen  Gmail  Account  and  then  forwarded  it  to  Davidson. 
—— — :  g.  At  6:37  p.m.,  Cohen  asked  Pecker  by  text  message,-  “Can  we  speak?  Important.” 
Cohen  called  Pecker  at  6:49  p.m.  and  connected  for  thirty  seconds.  At  6:57  p.m.,  Cohen  sent 
Howard  a  text  message,  stating:  “Please  call  me.  Important.”  Cohen  called  Howard  at  7:00  p.m. 
and  connected  for  about  thirty  seconds.  At  7:06  p.m.,  Cohen  called  Pecker  again  and  they  spoke 
for  nearly  thirteen  minutes.  At  7:24  p.m.,  Howard  sent  a  text  message  to  Cohen  that:  “He  said 
he’d  call  me  hack  in  20  minutes.  I  told  him  what  you  are  asking  for  his  [sic]  reasonable.  I’ll  get 
it  sorted.”  Approximately  an  hour  later,  at  8:23  p.m.,  Howard  told  Cohen  by  text  message  to 
“check  your  Gmail  for  email  from  my  private  account.”  In  an  email  sent  at  8:23  p.m.  by  Howard 
to  Cohen  and  Davidson,  with  the  subject  line  “Confirmation,”  Howard  stated,  “Thank  you  both 
for  chatting  with  me  earlier.  Confirming  agreement  on:  -  Executed  agreement,  hand-signed  by 
Keith’s  client  and  returned  via  overnight  or  same-day  FedEx  to  Michael,  -  Change  of  agreement 
to  reflect  the  correct  LLC,  -  Transfer  of  funds  on  Thursday  AM  to  be  held  in  escrow  until  receipt 
of  agreement.”  After  receiving  that  email,  at  approximately  8:27  p.m.,  Cohen  asked  Howard  by 
text  message,  “Can  you  and  David  [Pecker]  give  me  a  call.”  Howard  promptly  responded:  “David 
is  not  around  I  think  I’ll  call.”  At  8:28  p.m.,  Howard  called  Cohen  and  they  spoke  for  three 
minutes. 
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22.  On  October  27,  2016,  Cohen  made  a  payment  to  Davidson  of  $130,000 — 
with  the  funds  intended  for  Clifford— for  the  purpose  of  securing  her  ongoing  silence  with  respect 
to  the  allegations  that  she  had  an  extramarital  affair  with  Trump.  Specifically,  based  on  my 
review  of  toll  records,  bank  records,  and  information  obtained  pursuant  to  the  iCloud  Warrant  and 
Cohen  Email  Warrants,  I  have  learned  the  following: 

a.  At  9:47  a.m.,  Cohen  sent  Davidson  an  email,  stating:  “Keith,  kindly  confirm  that 
the  wire  received  today,  October  27,  2016  shall  be  held  by  you  in  your  attorney  s  trust  account 
until  such  time  as  directed  for  release  by  me,  in  writing.  Additionally,  please  ensure  that  all 
paperwork  contains  the  correct  name  of  Essential  Consultants  LLC.  I  thank  you  in  advance  for 
your  assistance  and  look  forward  to  hearing  from  you  later.” 

b.  At  approximately  10:01  a.m.,  according  to  records  provided  by  First  Republic 
Bank,  Cohen  completed  paperwork  to  wire  $130,000  from  the  Essential  Consultants  Account — 
which  had  been  funded  a  day  prior  from  Cohen’s  home  equity  line  of  credit — to  the  attorney  client 
trust  account  at  City  National  Bank  that  Davidson  had  specified  in  the  wiring  instructions  he  sent 
to  Cohen.  The  wire  transfer  was  made  shortly  thereafter. 

c.  At  10:02  a.m.,  Davidson  responded  to  Cohen’s  email  from  9:47  a.m.,  stating:  “I 
confirm  that  I  will  work  in  good  faith  &  that  no  funds  shall  be  disbursed  unless  &  until  the  plaintiff 
personally  signs  all  necessary  settlement  paperwork,  (the  form  of  which  will  match  the  prior 
agreement).  The  settlement  docs  will  name  the  correct  corporation,  (Essential  Consultants  LLC). 
Plaintiffs  signature  will  be  notarized  and  returned  to  you  via  FedEx.  Only  after  you  receive  FedEx 
will  I  disburse.  Fair?” 

d.  At  1 0:50  a.m.,  First  Republic  Employee-1  sent  Cohen  an  email  confirming  that  the 
payment  had  been  sent  and  providing  him  with  the  wire  number. 
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23.  On  October  28,  2016,  and  the  days  that  followed,  Cohen  finalized  the 
transaction  with  Davidson.  Specifically,  based  on  my  review  of  toll  records,  information  obtained 
pursuant  to  the  iCloud  Warrant,  public  sources,  and  bank  records,  I  know  the  following: 

a.  On  October  28,  2016,  at  1 1 :48  a.m.,  Cohen  spoke  to  Trump  for  approximately  five 
minutes.  Beginning  at  1:21  p.m.,  Cohen  attempted  a  series  of  phone  calls  to  Davidson,  Pecker, 
and  Howard  throughout  the  day,  although  it  appears  he  may  only  have  connected  with  Howard. 

- - - -b.  Later  that  day— at  approximately  7:01  p.m., Davidson  stated  to  Cohen  by  text 

message  that  “all  is  AOK.  I  should  have  signed,  notarized  docs  on  Monday.  You  should  have 
them  on  Tuesday.”  Cohen  thanked  him  and  said  “I  hope  we  are  good.”  Davidson  responded,  “I 
assure  you.  We  are  very  good.”  Howard  also  texted  Cohen  at  7:08  p.m.,  “Keith  [Davidson]  says 
we  are  good.”  Cohen  then  responded  “OK”  to  Howard  and  “Excellent”  to  Davidson.  At 
approximately  10:30  p.m.,  Cohen  spoke  to  Hicks  for  three  minutes. 

c.  On  October  31,  2016,  Cohen  called  Howard  at  8:22  p.m.  and  they  spoke  for  over 
three  minutes.  At  8:32  p.m.,  Cohen  received  text  messages  from  both  Howard  and  Davidson. 
Howard  said:  “You’ll  have  paperwork  tomorrow  says  KD.”  Davidson  said:  “We  are  AOK.  You 
will  be  receiving  a  package  tomorrow.”  Cohen  responded  “Thank  you”  to  Howard  and  “Thanks 
Keith.  Will  call  you  then”  to  Davidson.  From  my  involvement  in  this  investigation,  I  believe 
Davidson  was  referring  to  a  signed  nondisclosure  agreement  when  he  told  Cohen  that  he  would 
receive  a  package. 

d.  Based  on  my  review  of  court  filings  that  became  public  in  20 1 8, 1  have  learned  that 
on  or  about  October  28,  2016,  “EC,  LLC  and/or  David  Dennison”  entered  into  a  “confidential 
settlement  agreement  and  mutual  release”  with  “Peggy  Peterson,”  pursuant  to  which  “Peterson” 
agreed  not  to  disclose  certain  “confidential  information  pertaining  to  [Dennison]”  in  exchange  for 
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$130,000.  The  agreement  provided  that  “EC,  LLC”  would  wire  the  funds  to  “Peterson’s” 
attorney,  who  would  then  transfer  funds  to  “Peterson.”  Cohen  signed  the  agreement  on  behalf  of 

I 

“EC,  LLC.”  The  agreement  stated  that  the  address  for  “EC,  LLC,”  which  was  later  referred  to  in 
the  agreement  as  “Essential  Consultants,  LLC,”  was  Cohen’s  residence. 

I' 

| 

e.  Consistent  with  the  “confidential  settlement  agreement  and  mutual  release,”  on  or 
about  November  1,  2016,  Davidson  transferred  $96,645  from  his  attorney  client  trust  account  at 

Citv  National  Bank  to  a  bank  account  in  Clifford’s  name.  The  wire  had  the  annotation  “net 

J  '  "  _  _  '  _ '  I 

settlement.”  On  the  same  day,  at  approximately  9:48  a.m.  Davidson  sent  Cohen  a  text  message 
with  a  picture  of  a  FedEx  delivery  confirmation,  stating  that  at  approximately  9:09  a.m.  a  package 
shipped  by  Davidson  the  previous  day  had  arrived  for  Cohen  at  his  Trump  Organization 

I 

address.  On  the  same  day,  at  approximately  6:14  p.m.,  Davidson  sent  Cohen  an  email  with  an 
audio  file  attached  and  said  “Give  this  a  lesson  [sic]  and  then  call  me.”  The  audio  attachment  was 
titled  “Stormy .mp3”  and  was  a  five-minute  recording  of  Davidson  interviewing  Clifford  about 
recent  public  allegations  made  by  an  adult  film  star  named  Jessica  Drake  regarding  her  alleged 
past  affair  with  Trump;  in  the  recording,  Clifford  explained  the  reasons  she  believed  that  Drake 
was  not  credible.  Less  than  an  hour  later,  at  approximately  7:05  p.m.,  Cohen  called  Trump,  but 
it  appears  that  they  did  not  connect.  Cohen  then  called  a  telephone  number  belonging  to 
Kellyanne  Conway,  who  at  the  time  was  Trump’ s  campaign  manager.  They  did  not  connect.  At 
approximately  7:44  p.m.,  however,  Cohen  received  a  return  call  from  Conway,  which  lasted  for 
approximately  six  minutes. 

24.  On  November  4,  2016,  just  three  days  after  the  Clifford  transaction  was 
completed  and  just  four  days  before  the  presidential  election,  the  Wall  Street  Journal  published  an 
article  alleging  that  the  National  Enquirer  had  “Shielded  Donald  Trump”  from  allegations  by. 
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Playboy  model  Karen  McDougal  that  she  and  Trump  had  an  affair.  The  article  alleged  that  AMI 
had  agreed  to  pay  McDougal  to  bury  her  story.  McDougal,  like  Clifford,  had  been  represented 
by  Davidson.  Based  on  my  review  of  toll  records,  information  obtained  pursuant  to  the  Cohen . 
Email  Warrants  and  iCloud  Warrant,  and  public  sources,  it  appears  that  Cohen  spoke  frequently 
to  Davidson,  Howard,  Pecker,  and  Hicks  around  the  time  of  this  article’s  publication — -just  days 
before  Election  Day — about  the  importance  of  preventing  the  McDougal  and  Clifford  stories  from 


gaining  national  traction.  Specifically,  I  have  learned  the  following: 


a.  Between  4:30  and  8:00  p.m.  on  November  4,  Cohen  communicated  several  times 
with  Howard,  Pecker  and  Davidson.  For  instance,  at  approximately  4:49  p.m.,  Cohen  sent 
Howard  a  text  message  with  a  screenshot  of  an  email  forwarded  to  him  by  another  Trump 
Organization  lawyer.  The  forwarded  email  was  from  a  Wall  Street  Journal  reporter,  and  asked  for 

comment  from  Trump  and/or  the  campaign  on  the  story.  Cohen  also  spoke  with  Hicks  several 

\ 

times,  including  shortly  before  and/or  after  calls  with  Pecker,  Howard  and  Davidson.  Indeed,  at 
approximately  7:33  p.m.,  using  two  different  cellphones  subscribed  to  him,  Cohen  appears  to  have 
been  talking  to  Davidson  and  Hicks  at  the  same  time. 

b.  At  approximately  8:51  p.m.,  Cohen  sent  Howard  a  message,  stating:  “She’s  being 

really  difficult  with  giving  Keith  a  statement.  Basically  went  into  hiding  and  unreachable.”  One 

minute  later,  Howard  responded:  “I’ll  ask  him  again.  We  just  need  her  to  disappear.”  Cohen 

responded,  “She  definitely  disappeared  but  refuses  to  give  a  statement  and  Keith  cannot  push  her.” 

At  approximately  8:55  p.m.,  Howard  responded  to  Cohen’s  text:  “Let’s  let  the  dust  settle.  We  don’t 

want  to  push  her  over  the  edge.  She’ s  on  side  at  present  and  we  have  a  solid  position  and  a  plausible 

position  that  she  is  rightfully  employed  as  a  columnist.”  Based  on  my  involvement  in  this 

investigation,  I  believe  Cohen  and  Howard  were  referring  to  Karen  McDougal  when  they  were 
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discussing  “she”  and  “her.”  Additionally,  I  believe  Howard’s  statement  that  “we  have  ...  a 
plausible  position  that  she  is  rightfully  employed  as  a  columnist”  was  a  reference  to  the  fact  that 
AMI  had  given  McDougal  payments  for  her  role  as  a  purported  columnist  for  the  company. 

c.  At  approximately  8:58  p.m.  on  November  4,  2016,  Howard  attempted  to  reassure 
Cohen  about  the  effect  of  the  forthcoming  Wall  Street  Journal  article,  texting,  “I  think  it’ll  be  ok 
pal.  I  think  it’ll  fade  into  the  distance.”  Cohen  responded,  “He’ s  pissed.”  Howard  wrote  back, 
“I’m  piss^t '  Vnn ’re  pissed  Pecker  is  pissed.  Keith  is  pissed.  Not  much  we  can  do.”  Based 
on  my  involvement  in  this  investigation,  I  believe  Cohen  was  referring  to  Trump  when  he  stated 
“he’s  pissed.”  Cohen  asked  Howard  at  approximately  9:00  p.m.  how  the  Wall  Street  Journal 
could  publish  its  article  if  “everyone  denies.”  Howard  responded,  “Because  there  is  the  payment 
from  AMI.  It  looks  suspicious  at  best.” 

d.  At  approximately  9:03  p.m.,  Hicks  called  Cohen  and  they  spoke  for  two  minutes. 
At  approximately  9:11  p.m.,  Cohen  called  Howard  and  spoke  to  him  for  five  minutes.  At 
approximately  9:15  p.m.,  Hicks  called  Cohen  and  they  spoke  for  nearly  seven  minutes.  Again, 
Cohen  used  different  phones  for  these  two  calls,  such  that  he  appears  to  have  been  on  both  calls 
for  about  a  minute  of  overlap.  At  approximately  9:32  p.m.,  Cohen  texted  Pecker,  “The  boss  just 
tried  calling  you.  Are  you  free?”  A  minute  later,  Cohen  texted  Howard,  “Is  there  a  way  to  find 
David  quickly?” 

e.  At  approximately  9:50  p.m.,  the  Wall  Street  Journal  article  was  published  online. 
Howard  and  Hicks  both  sent  web  links  for  the  article  to  Cohen.  Over  the  next  half  hour,  Cohen 
and  Howard  exchanged  several  text  messages  commenting  on  how  the  story  came  across. 
The  next  morning  on  November  5, 2016,  at  approximately  7:35  a.m.,  Cohen  texted  Hicks,  “So  far 
I  see  only  6  stories.  Getting  little  to  no  traction.”  Hicks  responded,  “Same.  Keep  praying! !  It’s 
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working!”  Cohen  wrote  back,  “Even  CNN  not  talking  about  it.  No  one  believes  it  and  if 
necessary,  I  have  a  statement  by  Storm  denying  everything  and  contradicting  the  other  porn  stars 
statement.  I  wouldn’t  use  it  now  or  even  discuss  with  him  as  no  one  is  talking  about  this  or  cares!” 
Based  on  my  involvement  in  this  investigation,  I' believe  Cohen  was  referring  to  the  above- 
referenced  recorded  audio  statement  by  Clifford  that  he  obtained  from  Davidson,  and  was  stating 
that  such  a  statement  could  be  used  to  influence  potential  negative  media  relating  to  Trump,  but 
was  unnecessary  at  that  time.  Based  on  a  text  message  from  1  licks  to  Cohen,  I  believe  that  later 


that  morning.  Pecker  spoke  to  Trump. 

25.  On  or  about  November  8,  2016,  Trump  won  the  election  for  President  of 
the  United  States. 

26.  On  or  about  January  12,  2018,  the  Wall  Street  Journal  first  reported  that 
Cohen  arranged  a  payment  to  Clifford.  On  or  about  January  22,  2018,  Common  Cause,  a 
government  watchdog  group,  filed  a  complaint  with  the  Federal  Election  Commission,  alleging 
that  Cohen  had  violated  campaign  finance  laws  by  making  the  payment  to  Clifford.  Based  on  my 
review  public  sources  following  that  report,  as  well  as  emails  obtained  pursuant  to  the  Cohen  Email 
Warrants,  I  have  learned  the  following: 

a.  On  or  about  January  23,  2018,  the  day  after  Common  Cause  filed  its  complaint, 

Cohen  began  emailing  himself  drafts  of  statements  describing  his  payment  to  Clifford. 

Additionally,  on  January  23,  2018,  Cohen  emailed  the  following  draft  of  that  statement  to  an 

individual  who  appears  to  be  writing  a  book  on  Cohen’s  behalf: 

In  October  2016, 1  was  contacted  by  counsel  for  Ms.  Clifford  stating  that 
news  outlets,  including  ABC  news,  were  pursuing  the  2011  story  of  an' 
alleged  affair  between  Mr.  Trump  and  Ms.  Clifford.  Despite  the  fact  that 
both  parties  had  already  denied  the  allegation,  as  Mr.  Trump’s  longtime 
special  counsel  and  protector,  I  took  it  upon  myself  to  match  the  offer  and 
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keep  the  story  from  breaking.  I  knew  the  allegation  to  be  false,  but  I  am 
also  a  realist  who  understands  that  just  because  something  is  false  doesn ’t 
mean  that  it  doesn ’t  create  harm  and  damage.  I  could  not  allow  this  to 
occur.  I  negotiated  a  non-disclosure  agreement  with  Ms.  Clifford’s 
counsel  and  tendered  the  funds.  I  did  this  through  my  Delaware  LLC  and 
transferred  personal  funds  to  cover  the  agreement.  I  was  not  reimbursed 
any  monies  from  Mr.  Trump,  the  Trump  Organization,  any  third  party  or 
the  Presidential  campaign.  At  no  point  did  I  ever  advise  Mr.  Trump  of  my 
communications  or  actions  regarding  this  agreement.  As  outlandish  and 
unusual  as  this  may  appear,  the  Trumps  have  been  like  family  to  me  for 
over  a  decade.  It’ s  what  you  do  for  family. 


(Emphasis  added.)  Rased  on  my  involvement  in  this  investigation,  I  believe  that  the  above  email 
is  an  acknowledgement  that  the  allegation  of  the  affair  had  existed  for  some  time  if  ...the  2011 
story. . .”),  but  that  Cohen  was  motivated  to  “keep  the  story  from  breaking”  again  in  October  2016. 

b.  On  or  about  February  13,  201 8,  Cohen  said  in  a  statement  to  The  New  York  Times 
that  “Neither  the  Trump  Organization  nor  the  Trump  campaign  was  a  party  to  the  transaction  with 
Ms.  Clifford.  The  payment  to  Ms.  Clifford  was  lawful,  and  was  not  a  campaign  contribution  or  a 
campaign  expenditure  by  anyone.”  Cohen  declined  to  answer  follow-up  questions  including 
whether  Trump  had  been  aware  of  the  payment,  why  Cohen  made  the  payment,  or  whether  similar 
payments  had  been  made  to  other  people. 

c.  On  or  about  February  14, 2018,  Cohen  was  asked  by  The  New  York  Times  whether 
Trump  had  reimbursed  him,  whether  he  and  Trump  had  made  any  arrangement  at  the  time  of  the 
payment,  or  whether  he  had  made  payments  to  other  women.  Cohen  stated  in  response,  “I  can’t 
get  into  any  of  that.”  On  or  about  February  14,  2018,  Cohen  also  stated  to  The  Washington  Post 
that:  “In  a  private  transaction  in  2016,  I  used  my  own  personal  funds  to  facilitate  a  payment  of 
$130,000  to  Ms.  Stephanie  Clifford.  Neither  the  Trump  Organization  nor  the  Trump  campaign 
was  a  party  to  the  transaction  with  Ms.  Clifford,  and  neither  reimbursed  me  for  the  payment,  either 
directly  or  indirectly.” 
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) 

d.  On  or  about  March  9,  2018,  Cohen  stated  to  ABC  News  that  “the  funds  were  taken 
from  my.home  equity  line  and  transferred  internally  to  my  LLC  account  in  the  same  bank.” 

27.  For  the  foregoing  reasons,  there  is  probable  cause  to  believe  that  Cohen 
committed  the  Subject  Offense  by  making  an  in-kind  contribution  to  Trump  or  the  Trump 
campaign  in  the  fomi  of  a  $130,000  payment  to  Clifford  on  the  election.  Indeed,  while  Cohen 
denies  having  given  an  unlawful  contribution,  in  his  own  statements  Cohen  has  admitted  that  he 
paid  $130,000  of  his  “personal  funds”  to  Clifford  and  that  the  payment  occurred  less  than  two 
weeks  before  the  election,  as  Trump  was  facing  negative  media  allegations  about  his  behavior 
toward  women,  even  though  allegations  of  an  affair  between  Trump  and  Clifford  existed  since 
2011. 

28.  I  have  reviewed  records  maintained  by  AT&T,  from  which  I  have  learned, 
in  substance  and  in  part,  that  the  Target  Cellular  Devices  are  still  active.  Based  on  my  training 
and  experience,  my  familiarity  with  this  investigation,  and  the  information  set  forth  above,  I 
therefore  believe  that  the  requested  data  will  lead  to  evidence  of  the  Subject  Offense. 
Specifically,  information  will  lead  to  the  present  location  of  the  Target  Cellular  Devices;  law 
enforcement  may  then  obtain  evidence  from  the  Target  Cellular  Devices,  by  subpoena  or  search 
warrant,  including  but  not  limited  to  contact  lists  containing  contact  information  for  participants 
in  the  illegal  campaign  contribution  scheme  and  well  as  text  messages  between  these  participants. 

MANNER  OF  EXECUTION 

29.  .  In  my  training  and  experience,  I  have  learned  that  cellular  phones  and  other 

cellular  devices  communicate  wirelessly  across  a  network  of  cellular  infrastracture,  including 

towers  that  route  and  connect  individual  communications.  When  sending  or  receiving  a 

communication,  a  cellular  device  broadcasts  certain  cellular  and  wifi  signals  to  the  cellular  tower 
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that  is  routing  its  communication.  These  cellular  and  wifi  signals  include  a  cellular  device’s 
unique  identifiers. 

30.  To  facilitate  execution  of  this  warrant  to  determine  the  location  of  the  Target 
Cellular  Devices,  law  enforcement  may  use  an  investigative  device  or  devices  capable  of 
broadcasting  cellular  and  wifi  signals  that  will  be  received  by  the  Target  Cellular  Devices  or 
receiving  cellular  and  wifi  signals  from  nearby  cellular  devices,  including  the  Target  Cellular 
Devices.  Such  a  device  may  function  in  some  respects  like  a  cellular  tower,  except  that  it  will  not 

be  connected  to  the  cellular  network  and  cannot  be  used  by  a  cell  phone  to  communicate  with 
others.  The  device  may  send  a  signal  to  the  Target  Cellular  Devices  and  nearby  cellular  devices 
and  thereby  prompt  them  to  send  cellular  and  wifi  signals  that  include  the  unique  identifier  of  the 
device.  Law  enforcement  may  monitor  the  cellular  and  wifi  signals  broadcast  by  the  Target 
Cellular  Devices  for  non-content  signal  information  and  use  that  information  to  determine  the 
Target  Cellular  Devices’  location,  even  if  it  is  located  inside  a  house,  apartment,  or  other  building. 
The  device  will  not  intercept  the  contents  of  the  Target  Cellular  Devices’  communications,  such 
as  telephone  calls,  text  messages,  and  other  electronic  communications.  Further,  the  device  will 
not  collect  any  other  data  stored  on  the  Target  Cellular  Devices,  including  e-mails,  text  messages, 
contact  lists,  images,  or  Global  Positioning  System  (GPS)  data. 

P 

31.  The  investigative  device  may  interrupt  cellular  service  of  phones  or  other 

cellular  devices  within  its  immediate  vicinity.  Any  service  disruption  to  non-target  devices  will 

be  brief  and  temporary,  and  all  operations  will  attempt  to  limit  the  interference  with  such  devices. 

In  order  to  connect  with  the  Target  Cellular  Devices,  the  device  may  briefly  exchange  cellular  and 

wifi  signals  with  all  phones  or  other  cellular  devices  in  its  vicinity  to  determine  whether  those 

devices’  unique  identifiers  match  the  identifiers  of  the  Target  Cellular  Devices.  These  cellular 
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and  wifi  signals  may  include  cell  phone  identifiers.  The  device  will  not  complete  a  connection 
with  cellular  devices  determined  not  to  be  the  Target  Cellular  Devices,  and  law  enforcement  will 
limit  collection  of  information  from  devices  other  than  the  Target  Cellular  Devices.  To  the  extent 
that  any  information  from  a  cellular  device  other  than  the  Target  Cellular  Devices  is  collected  by 
the  law  enforcement  device,  law  enforcement  will  delete  that  information,  and  law  enforcement 
will  make  no  investigative  use  of  it  absent  further  order  of  the  court,  other  than  distinguishing  the 

Target  Cellular  Devices  from  all  other  cellular-devices. - 3 — - - - 

AUTHORIZATION  REQUEST 

32.  Based  on  the  foregoing,  I  request  that  the  Court  issue  the  proposed  search 
warrant,  pursuant  to  Federal  Rule  of  Criminal  Procedure  41.  The  proposed  warrant  also  will 
function  as  a  pen  register  order  under  18  U.S.C.  §  3123. 

33.  I  further  request,  pursuant  to  18  U.S.C.  §  3103a(b)  and  Federal  Rule  of 
Criminal  Procedure  41(f)(3),  that  the  Court  authorize  the  officer  executing  the  warrant  to  delay 
notice  until  30  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified 
because  there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant 
may  have  an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the 
subscriber  or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing 
investigation,  as  such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence, 
change  patterns  of  behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is 
reasonable  necessity  for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above. 
See  18  U.S.C.  §  3103a(b)(2). 
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34.  I  farther  request  that  the  Court  authorize  execution  of  the  warrant  at  any 
time  of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of 
daytime  hours. 

35.  I  further  request  that  the  Court  order  that  all  papers  in  support  of  this 
application,  including  the  affidavit  and  search  warrant,  be  sealed  until  further  order  of  the  Court. 
These  documents  discuss  an  ongoing  criminal  investigation  that  is  neither  public  nor  known  to  all 
of  the  targets  of  the  investigation.  Accordingly,  there  is  good  cause  to  seal  these  documents 


because  their  premature  disclosure  may  seriously  jeopardize  that  investigation. 

36.  A  search  warrant  may  not  be  legally  necessary  to  compel  the  investigative 
technique  described  herein.  Nevertheless,  I  hereby  submit  this  warrant  application  out  of  an 
abundance  of  caution. 

Respectfully  submitted, 


f  ederal  Bureau  of  Investigation 


Subscribed  and  sworn  to  before  me 


On:  c-  ST;,  2JS 1 1 


(LH  PiTThP^J 


UNITED  STATES  MAGISTRATE  JUDGE 
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IN  THE  UNITED  STATES  DISTRICT  COURT 
FOR  THE  SOUTHERN  DISTRICT  OF  NEW  YORK 

Case  No. _ 

Filed  Under  Seal 

WARRANT  AND  ORDER  OF  AUTHORIZATION 

TO: _ Special  Agents  of  the  Federal  Bureau  of  Investigation  and  Other  Authorized 

Personnel  ~  ^  ~  ~ 

L  Findings 

The  Court  hereby  finds: 

1.  Upon  an  affidavit  of  Special  Agent  of  the  Federal  Bureau  of 

Investigation  (“Affidavit”)  and  pursuant  to  Federal  Rule  of  Criminal  Procedure  41,  there  is 
probable  cause  to  believe  that  violations  of  52  U.S.C.  §§  301 16(a)(1)(A)  and  30109(d)(l)(A)(l) 
(illegal  campaign  contributions)  (the  “Subject  Offense”)  have  been  committed  by  Michael  Cohen 
(the  “Target  Subject”),  and  that  the  Target  Subject  uses  cellular  devices  assigned  call  numbers 

the  (“Target  Cellular  Devices”),  which  are  described  in 
Attachment  A.  Further,  there  is  probable  cause  to  believe  that  the  location  of  the  Target  Cellular 
Device  will  constitute  evidence  of  the  Subject  Offense.  Specifically,  there  is  probable  cause  to 
believe  that  the  location  of  the  Target  Cellular  Devices  will  constitute  evidence  of  those  criminal 
violations,  including  leading  to  the  location  of  the  Target  Cellular  Devices,  on  which  there  is 
probable  cause  to  believe  evidence  of  these  offenses  exist,  as  detailed  below. 

2.  Pursuant  to  18  U.S.C.  §  3123(b)(1),  the  Government  has  certified  that  the  pen 
register  information  for  the  Target  Cellular  Devices  is  relevant  to  an  ongoing  investigation  by  the 


IN  THE  MATTER  OF  THE  USE  OF  A  CELL- 
SITE  SIMULATOR  TO  LOCATE  THE 
CELLULAR  DEVICES  ASSIGNED  CALL 
NUMBERS 
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Investigating  Agency  of  the  Target  Subject  and  others  unknown  in  connection  with  suspected 
violations  of  the  Subject  Offense. 

NOW,  THEREFORE,  pursuant  to  Fed.  R.  Crim.  P.  41,  18  U.S.C.  §§  3121  etseq.,  and  18 
U.S.C.  §'  3103a,  IT  IS  HEREBY  ORDERED: 

II.  Warrant  and  Order  of  Authorization 

3.  Warrant.  Law  enforcement  agents  and  other  authorized  law  enforcement 
officials  are  hereby  authorized  to  employ  an  electronicinvestigative  technique,  whichis  described 
in  Attachment  B,  to  the  determine  the  location  of  the  Target  Cellular  Devices,  which  are  described 
in  Attachment  A. 

4.  Data  Collection  and  Retention.  In  the  course  of  employing  the  technique,  law 
enforcement  agents  and  other  authorized  law  enforcement  officials  (a)  must  make  reasonable 
efforts  to  limit  interference  with  cellular  devices  other  than  the  Target  Cellular  Devices,  (b)  must 
promptly  delete  information  collected  from  cellular  devices  other  than  the  Target  Cellular  Devices 
once  the  Target  Cellular  Devices  is  located,  and  (c)  are  prohibited  from  using  data  acquired  beyond 
that  necessary  to  locate  the  Target  Cellular  Devices,  absent  further  order  of  the  Court. 

5.  Delayed  Notice.  Pursuant  to  1 8  U.S.C.  §  3 1 03a(b)  and  Federal  Rule  of  Criminal 
Procedure  41(f)(3),  the  Court  authorizes  the  officer  executing  the  warrant  to  delay  in  notice  until 
3 0  days  from  the  end  of  the  period  of  authorized  surveillance.  This  delay  is  justified  because 
there  is  reasonable  cause  to  believe  that  providing  immediate  notification  of  the  warrant  may  have 
an  adverse  result,  as  defined  in  18  U.S.C.  §  2705.  Providing  immediate  notice  to  the  subscriber 
or  user  of  the  Target  Cellular  Devices  would  seriously  jeopardize  the  ongoing  investigation,  as 
such  a  disclosure  would  give  that  person  an  opportunity  to  destroy  evidence,  change  patterns  of 
behavior,  and  notify  confederates.  See  18  U.S.C.  §  3103a(b)(l).  There  is  reasonable  necessity 
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for  the  use  of  the  technique  described  above,  for  the  reasons  set  forth  above.  See  18  U.S.C.  § 


3103a(b)(2). 

6.  Time  of  Execution.  The  Court  authorizes  execution  of  this  Warrant  at  any  time 
of  day  or  night,  owing  to  the  potential  need  to  locate  the  Target  Cellular  Devices  outside  of  daytime 
hours. 

7.  Sealing.  This  Warrant  and  Order,  and  the  supporting  Agent  Affidavit,  shall  be 
-sealed  until  further  order  of'  the  Court,  except  that  the  Government  may  without  further- order-of 
this  Court:  provide  copies  of  the  Warrant  and  Order  or  the  supporting  Application  and  Agent 
Affidavit  as  need  be  to  personnel  assisting  the  Government  in  the  investigation  and  prosecution  of 
this  matter;  and  disclose  these  materials  as  necessary  to  comply  with  discovery  and  disclosure 
obligations  in  any  prosecutions  related  to  this  matter. 

Dated:  New  York,  New  York 


Time  Issued 


UNITED  STATES  MAGISTRATE  JUDGE 
Southern  District  of  New  York 
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ATTACHMENT  A 


This  warrant  authorizes  the  use  of  the  electronic  investigative  technique  described  in 
Attachment  B  to  identify  the  location  of  the  cellular  devices  assigned  phone  numbers 

whose  wireless  provider  is  AT&T,  and  whose  listed  subscriber  is  Michael 


Cohen. 
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ATTACHMENT  B 

Pursuant  to  an  investigation  of  Michael  Cohen  for  a  violation  of  52  U.S.C.  §§ 
30116(a)(1)(A)  and  30109(d)(l)(A)(l)  (illegal  campaign  contributions)  (the  “Subject  Offense”), 
this  Warrant  authorizes  the  officers  to  whom  it  is  directed  to  determine  the  location  of  the  cellular 
devices  identified  in  Attachment  A  by  collecting  and  examining: 

1.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  for  the  purpose  of 
communicating  with  cellular  infrastructure,  including  towers  that  route  and  connect 

individual  communications;  and 

2.  radio  cellular  and  wifi  signals  emitted  by  the  target  cellular  device  in  response  to  radio 
cellular  and  wifi  signals  sent  to  the  cellular  device  by  the  officers; 

for  a  period  of  thirty  days,  during  all  tunes  of  day  and  night.  This  warrant  does  not  authorize  the 
interception  of  any  telephone  calls,  text  messages,  other  electronic  communications,  and  this 
warrant  prohibits  the  seizure  of  any  tangible  property.  The  Court  finds  reasonable  necessity  for 
the  use  of  the  technique  authorized  above.  See  18  U.S.C.  §  3103a(b)(2). 
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